In this presentation we will start by discussing where web traffic traverses and potentially gets logged. Touch on the various fields that may be available and how that data could be useful to you. Understand a few ways the logs may become malformed and the importance of ensuring all logs are reviewed. Introduce OWASP Access Log Parser and share its historical development progress. Go over intrusion detection signatures for web logs and the evolution of those with the use of deobfuscation. We will wrap-up the session with a short usage demonstration before doing Q&A.