Defining a Metric Space of Host Logs and Operational Use Cases

Miki E. Verma, Robert A. Bridges

Host logs, in particular, Windows Event Logs, are a valuable source of information often collected by security operation centers (SOCs). The semi-structured nature of host logs inh…