Guidance Detect 11

Guidance Note:

Organisations should routinely review their network logs for anomalous/malicious behaviour via automated and manual techniques in order to ensure that network security has not been breached.

------

Certain users when allowed to can tamper the logs on your system, stopping you from being able to tell if something dodgy has happened. Checking the logs regularly allows you to keep on top of this and prevent it from happening.