Glossary: Logs and Data Sources for Investigations

Firewall log

Also written: firewall drop

A record of each connection a firewall allowed or blocked, with addresses, ports and flags. The shop server's KC-FW DROP lines revealed a port scan.