News for hackers. Stuff that matters.

A comment on Results of technical investigations for Storm-0558 key acquisition. Parent comment

Re:Results of technical investigations for Storm-0558 key ac... by ses1984 on Wednesday September 06, 2023 @02:28PM (#37409102)
Is it practical to keep logs detailed enough that would capture exfiltration like this from the corporate network?
[ Parent | on HN ]
Re:Results of technical investigations for Storm-0558 key ac... by ratg13 on Wednesday September 06, 2023 @02:36PM (#37409199)
If you take the time to do a decent setup.

Text compresses extremely well and long-term archive space is generally inexpensive.

The hard part is all the work of deciding what is important, what the processes will be, and implementing a proper archive system.

Most people just don't dedicate the resources to things like this until the need is demonstrated.

[ Parent | on HN ]