Skip to content

Glossary: Logs and Data Sources for Investigations

Audit log

Also written: audit trail, audit logs

A record of security-relevant actions, such as reading a sensitive file, changing a setting or clearing a log, with each action tied to the account that did it. It showed that Sam's account copied the customer file.

Where the book teaches it

Related terms

auditdauid (audit user ID)sudoWindows Security event IDs