Glossary: Attacks and Indicators

timeline

A list of events from all relevant logs, put in time order. Building one shows how an attack unfolded, for example from spraying, to a successful login, to a privilege escalation attempt, to a malware beacon.