tag: Log-Analysis · 1 items
- Engineer — Skip
- SOC/IR — Learn: The DShield honeypot TTY log parsing approach illustrates attacker command patterns post-login; useful context for tuning SSH session monitoring and understanding what commands adversaries run on compromised Linux hosts.
- Leader — Skip