CloudCore - Logs

Application Server Logs

Application Server

These logs include suspicious activities on the application server.

Database Access Logs

These logs capture the sequence of database queries and export actions taken by the attacker.

Endpoint Detection and Response (EDR) Logs

Endpoint Detection and Response (EDR)

These logs indicate endpoint-level alerts and actions.

Firewall Logs

These logs show external connections and potential unauthorised access attempts.

Security Information and Event Management (SIEM) Alerts

Security Information and Event Management (SIEM)

These logs detail alerts triggered by the SIEM system.

VPN Access Logs

These logs show the initial access via the VPN using compromised credentials.