Question: a. Propose and explain some rules which could be used to distinguish suspicious activities from normal user behaviour on a system for some organization by
a. Propose and explain some rules which could be used to distinguish suspicious activities from normal user behaviour on a system for some organization by considering an Automated Audit Log Analysis Tool?
b. Discuss in detail the pros and cons of automated audit log analysis tool.
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
