Practical Network Scanning

Event generator sensors

Logs are the key and primary requirements for visualizing what's going on in your network and who's attacking. Every organization wants the logs coming from the all-critical resources of your network and business. As security administrator, you always want the logs from your firewall, IPS, and IDS. You will also want logs from your key servers sitting in DMZ, and of course you would also include Active Directory server and your key application, endpoint, and database servers.