Skip to content

Glossary: Attacks and Indicators

missing logs

Also written: missing log, log gap

A log that stops or vanishes, such as one ending at 2:14 a.m. It can mean an attacker covering their tracks, but check for innocent causes like log rotation or a full disk first.

Where the book teaches it

Related terms

indicator of compromise (IOC)