Which logs do you really need?
Posted in Security Architecture, Technology on Jul 19th, 2019
When I ask customers what they log the answer is usually something with the firewall. Gigabytes per day of network flows that cost a fortune to store and that nobody reads. In a Zero Trust world the interesting stuff happens elsewhere. Start with the identity logs: sign-ins, failed sign-ins, MFA changes, risky sign-ins, changes to […]