In most big security breaches, there’s a familiar thread: something funny was going on, but no one noticed. The information was in the logs, but no one was looking for it. Logs from the hundreds or ...
Trying to get graylog set up for a security requirement to collect logs from our DCs. I'm a bit confused on some things like port numbers below 1024 and the like ...