Log Analysis Overview various types of logs generated at the endpoints while traveling. external world, except for the application server. In such scenarios, the following set of questions needs an answer. - How was the attacker able to penetrate the application server? - Why did the firewall allow access to the extemal attacker? - What set of queries did the attacker execute on the database? - Did the attacker alter the database? - Can we identify the origin of the attack