Module 5~8 min
Security Monitoring Basics
Prevention alone isn't enough -- organizations also need to notice when something goes wrong. This lesson introduces the basics of monitoring.
What You'll Learn
- Why monitoring matters
- What a log is
- What monitoring can help detect
Why Monitoring Matters
Even strong defenses can be bypassed, so monitoring systems for unusual activity helps catch problems early, before they cause serious damage.
Logs and Alerts
Systems generate logs -- records of events like logins, file access, or errors. Security monitoring tools review these logs, watching for patterns that suggest something suspicious is happening.
Example
A sudden flood of failed login attempts in a short time could be flagged by a monitoring system as a possible sign that someone is trying to guess a password.
Key Concepts
MonitoringLogAlert
Key Takeaways
- Monitoring helps catch problems that defenses alone might miss
- Logs are records of system events used for review
- Unusual patterns in logs can indicate suspicious activity
Knowledge Check
What is a "log" in the context of security monitoring?