When applications omit useful event data, teams may miss signs of misuse or lack evidence to investigate it. Developers and technical teams examine an attacker’s reconnaissance phase, identify gaps that weaken auditing, and review key design choices for collecting useful application logs.

Participants of this module will…

• Obtain a background on the reconnaissance phase of an attack
• Review the dangers of not collecting sufficient information for auditing
• Learn about key factors to consider when building a logging system