Talos Takes Ep. #42: Seriously folks, save your logs
Talos Takes · Jon Munshaw (host) and Pierre Cadieux (speaker)
August 12, 20227m 29s
Audio is streamed directly from the publisher (buzzsprout.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
When Pierre Cadieux steps into a Cisco Talos Incident Response engagement, the first thing he wants to do is check out the customer’s logs. But if there are no logs to be found, he’ll be pretty limited in the kinds of insights he can provide.
This has come up several times during the SolarWinds era, when customers are wanting to know if they were targeted in the widespread supply chain attack. So in this episode of Talos Takes, Pierre joins the show to discuss why it’s so important to keep logs for everything — log-ins, events, applications and more.
Topics
SolarWindsIncident Responsesecurity logsCisco Talos Incident Responsesecurity