Skip to content

Glossary: Logs and Data Sources for Investigations

Device log

Also written: device logs

A log about a device itself, such as configuration changes, administrator sign-ins and hardware. 'Admin changed the firewall rule set' is a device log entry; 'rule dropped traffic' is a network log entry.

Where the book teaches it

Related terms

Network logsEndpoint logs