alt Hacker NewsShould we expect logs from a compromised system to be truthful?
Replies
lambdaone • today at 4:57 PM
Perhaps if those logs were streamed to a non-compromised machine and stored there
Should we expect logs from a compromised system to be truthful?
Perhaps if those logs were streamed to a non-compromised machine and stored there
No, of course not. Covering your tracks by manipulating logs and monitoring tools is stuff any sophisticated attacker would do