Showing 1–2 of 2 articles
How long to keep security logs
Retention is an operational decision about which events must remain available, for how long, and at what cost and sensitivity. Connect the window to incident questions and real search capability.
Read the visual guide
Brute force or password spraying? Read the sign-in pattern
Repeated guesses against one account and a few guesses across many accounts create different patterns. Review events across identities and time, rather than looking only for one noisy username.
Read the visual guide