Detection Tools - Logs

• System logs

• Audit logs

• Application logs

• Network management logs

• Network traffic capture

• Contemporaneous manual entries

• Logs maintained by the intruder, an ISP or telecommunications provider