Analyzing Linux Application Events — GIAC Linux Incident Responder

Official references for this objective

• Sans — FOR577: LINUX Incident Response and Threat Hunting | SANS Institute

  Many Linux systems exist to run applications, and the logs those applications produce are frequently where evidence of an attack first appears.