Log management for effective incident response

✍ Scribed by Dario Forte

• Book ID: 104392211
• Publisher: Elsevier Science
• Year: 2005
• Tongue: English
• Weight: 249 KB
• Volume: 2005
• Category: Article
• ISSN: 1353-4858
• DOI: 10.1016/s1353-4858(05)70279-8

✦ Synopsis

The spreading use of distributed systems is forcing the development of increasingly varied investigative procedures in digital forensics, for both the 'target' and the 'analysis' platforms. A target platform is one that has been attacked or used to perpetrate some policy or criminal violation, while an analysis platform is the one supporting the forensic workstation. In this article we will be discussing UNIX-based platforms and the various 'dialects' such as Solaris, AIX, xBSD and, of course, LINUX, with particular reference to log analysis and its related issues.