Glossary: Logs and Data Sources for Investigations

Endpoint logs

Also written: endpoint records

Records of what happens inside a single computer: antivirus detections, EDR telemetry, host firewall events, USB devices and software installs.