Defensive Security (Blue Team) / Detection
Lesson 17 of 32
Logs are evidence
Logs record what happened: logins, commands, connections, errors. Without them you can't tell whether you were attacked or what was taken.
Key points
- Collect logs centrally
- Keep them long enough
- Sync clocks with NTP so times line up
Quiz · +10 XP
Why sync all servers' clocks?
Log in to save progress and earn XP.