3.6 Log Management

3.6.1 Dashboard Log Access#

The main Dashboard (see Section 2.1) provides direct access to categorized log data. The Log History tab provides an archive of historical log records for forensic analysis and compliance reporting. Additional tabs like Interactions and Credentials provide focused log views.

3.6.2 Intelligence Area Logs#

The Intelligence Area module (see Section 2.9) provides advanced log analysis. The Events page displays system-wide event monitoring with real-time counters for Connection, Interaction, and Credential events. The Forensic Intelligence page provides session-level forensic logs with attacker details, session duration, and VM snapshot data.

3.6.3 VGN Logs#

The Virtual Guarded Network module (see Section 2.7.5) provides comprehensive audit logs for VPN connectivity through three sub-tabs: Connections, Failures, and IP Assignments. All log views include a date range filter and a search bar for narrowing results.

3.6.4 Honeypot-Specific Logs#

Individual honeypot logs can be accessed directly from the Guardpots module (see Section 2.2). Each honeypot card includes a Log (yellow) action button for viewing logs and generating reports specific to that instance.