TA_01

Timestamps that are not normalized, synced, or in various time zones are the bane of any investigation.

When unsure, where should you look to help you configure application logging?

Splunk has robust search functionality and a built in search assistant which enables you to search the entire data.

Requests provide resources to users after the authentication step.

Datalogging should always be__________ sanctioned

__________when similar data points are replicated across multiple cycles at the same point in each cycle.

provides a user-friendly interface for you to review the data that’s been collected.

What is a MAC?

__________sessions ensure users can navigate privately and without interruption.

___________NIDS are standardized, well supported, and have a continuously updated database.

Systems that contain sensitive data should have ___________ retention policies.

It is important to log both __________and __________ connections.

Work with the Qradar to create __________ event properties.  These properties allow for granular event a

What generated the log on the system, and what severity is the logged event.

UNIX __________ is program that processes many forms of big data.

The man file that configures logging in Unix is ___________