Mastering Security Logging: Essential Tips for SaaS & B2B Companies
Ayman explains the importance of security logging for SaaS and B2B companies, emphasizing the need for situational awareness through logging user activities and system events. He recommends starting by enabling logging features such as AWS CloudTrail and sending logs to tools like Sumo, Splunk, or Datadog for analysis and searchability.
Transcript
Logging is important because you want to have some sort of situational awareness of what's going on in your company. Are people logging in as root? Do you have multiple people logging with the same identity, for example? You need to have some sort of situational awareness. If you're asking yourself, where should I start with security? You probably don't have that situational awareness. Can't fix something that you don't know is broken. Having some sort of logging, like first enabling the logging all over in your particular applications. In AWS, it would be enabling CloudTrail. In your SaaS applications, it would be sending those logs to your logging tool. 0:33 Could be a Sumo, could be a Splunk, could be Datadog, Papertrail, whatever it may be, you need to have your logs somewhere that you can search. Talk on information security covering CISO, vCISO, red team, threat modeling, Enterprise Security Weekly, Security Cafe, Getting Into Infosec, Ayman Elsawah, Adrian Sanabria.