 |
Third step we propose is to monitor and analyze the logs generated in the cloud using a log management solution that provides real-time analysis, and alert triggering functions to better manage the system. because it is very important to be proactive when it comes to logs.
Organizations must consider the potential value of each and every possible log source. There are a lot of types of logs that are being generated in the system, and here are some log types that must be considered for log collection to ensure efficiency:
Anti malware software: Examples of anti-malware include anti-virus, and anti-spyware.
Applications: The information logged by applications can be account changes, user authentication attempts.
Authentication servers: Directory servers and single sign-on servers will typically log each and every authentication attempt showing the originating user ID, destination system or application, date and time info, and success/failure details.
Firewalls: Firewalls can inspect content and ensure the state and integrity of permitted connections.
Network devices: Routers, switches, servers.
Operating systems: There are many varied operating systems on servers, workstations, and assorted network devices
|
IEEE/ICACT20210224 Slide.16
[Big Slide]
[YouTube]