Technical Guide Never Write to the Original — Four Habits for Working With Logs
You opened it. It grew by three bytes. That log file — is it still the same file after you read it? Operations…
Forensics
Technical Guide 
Technical Guide Logs as Evidence — Four Principles for Preserving, Excerpting, and Proving Integrity
The reboot cost thirty-eight minutes of log. Fixing it was right. What should you have taken with you first? L…
Technical Guide The First Hours of an Intrusion Investigation — Four Steps Through Tens of Millions of Auth Log Lines
4,812 failures. One success. All from the same IP. It could be an attack, or someone who forgot their password…