Dude, Where's My Log? The Unknown Logging Gaps in Your Environment, Why You Didn't Detect that Pentest, and What to Do About It

No ratings

Presented at BSidesTampa 2020 by

Kevin Kaminski

Failure to log everything needed for maximum visibility in your environment can leave huge gaps in your ability to remediate threats. But running an enterprise-level logging program can be difficult: how do you know if you're logging everything necessary to detect threats? Are all of your technologies configured to send the right logs? Are they all sending to a logging platform? In this session we will help you answer these and other critical questions of your logging program, which will ultimately help you remediate issues and better use log analysis to mitigate threats