Halloween 2000: more scary log entries
Continuing last year's Halloween tradition. Five log entries from this year that, on first reading, cost me an hour of stomach-clenched investigation. The lessons each one taught.
Notes from the field
Writing
Long-form thinking on cyber defence, detection, and resilience — from Slackware-era honeypots through to AI-driven SOC analytics.
Showing posts tagged log analysis — 4 results.
Halloween: the scariest log entries I have read this year
An off-cadence post for the season. Five log entries from this year that, on first reading, cost me an hour of stomach-clenched investigation. The lessons each one taught are durable.
Build your own log scanner: an evening's project
Commercial log-analysis tools cost real money. A Perl script that does 80 per cent of what they do is a few dozen lines. A walk through writing one, with the parts that turn out to matter.
Logfile analysis with awk and grep
Most security work, in practice, is reading log files. The tools you need are about thirty years old. Here is what I have learnt about driving them.