Skip to content

Glossary: Logs and Data Sources for Investigations

Logwatch

A tool that summarizes Linux logs into a report. Its sshd summary showed the whole password spray in a few lines.

Where the book teaches it

Related terms

Automated reportsshd