Everybody wanted the next video we're gonna be talking about.
Checking blogs.
In this particular video.
Now what's important about blogs is it's not just system logs that you're familiar with which is sits
in a bar log now there's quite a bit of logging here such as the off log or secure log or even the SIS
log.
You can see there's individual services in here as well such as post grass open VPN samba as tunnel
Apache to there's normally a cron one in here as well.
If you've set up cron and actually started using it it would generate logs there.
So there's a lot of options to here to be here.
And what's important about logs is that sometimes admins log things that they shouldn't.
So since log is a pretty common log to find a lot of custom applications or cron jobs logging to it
because a lot of things like Splunk or anything like or this log rotate will actually go ahead and grab
these files and do something with it.
So it's important to always check source log or some of the common ones like secure and the cron jobs
are also important as well because a lot of custom applications and scripts that just need to run might
log pretty sensitive data.
So if an error occurs it might dump the username password token whatever it might be into the log file
or it might have user data in the log file or eyepiece that it's been connecting to what ports and what
users it's using at the application has been left in debug mode it might provide even more information.
And the list just goes on and on and there's a lot of times where custom applications will just log
to their own special file inside of bar log.
So it's always good to just do a quick due diligence check double check this location because you never
know if something here is going to prove to be key about moving laterally on the network.