Can we put a detection process in place such as auditing account access at the database layer, review data center access logs for those coming and going into and out of the data center, and add language to our contracts (service agreements, etc).
After receiving Senate inquiries, the CIA looked at access logs for the database to which the Senate investigators had access and discovered that they indeed had accessed what the agency to be considered material covered by legal or other official privileges, and apparently made copies for themselves.
Also, an investigation regarding if and how available HTTP server log analysis tools could be used for EHR access log analysis, should be done.
Webviz: A tool for world-wide web access log visualization.
The requesting URLs, the machine originating the request, and the time of the request may be logged for access statistics and security purposes.
The researchers use queries to access the system logs for the course.
This solution avoids the access to the CDR logs for the analyst while provides to him the minimum information to performing the target analysis with correctness.
It will be used for system access log-ins and authentication, and will be the handle of your campus email address.
As for mechanism a) the file system monitoring tool iNotify was used, whereas for mechanism b) parsing the Apache access log file (/var/log/apache2/access.log) was used.
Basically, for each data source there is one module for collection and normalization, namely: Windows Security Log, BSM Log, tcpdump and Snort Log, Syslog and Apache Access Log.
The pre-processing of the access logs consists of merging the log files, removing irrelevant requests and/or data fields, removing robot requests, and identifying users and sessions for the local version of the access logs.
