Log Management
Sometimes logging records are the only evidence of a successful attack. Many organizations keep audit records for compliance purposes, but attackers rely on the fact that such organizations rarely look at the audit logs, unaware that their systems have been compromised. Attackers may control victim machines for months or years without anyone in the target organization knowing.




