Tutorials
Session Recording on the Bastion: tlog + sudo I/O + SSH Audit Pipeline
Making privileged access visible on the bastion: tlog/sudo I/O logging, the access model and a SIEM pipeline.
#audit
3 posts found.
Tutorials
Kubernetes API Server Audit Log: Policy and SIEM Pipeline
Collecting Kubernetes audit logs without drowning in noise: a practical approach to policy, retention, masking and SIEM correlation.
Tutorials
AAA on Network Devices with TACACS+: Command Authorization and Audit
A TACACS+ approach that reduces local admin sprawl on network devices and turns session traces into proof through roles, command authorization, and accounting.