Talos Takes Ep. #42: Seriously folks, save your logs
Summary: In this episode of Talos Takes, Cisco Talos Incident Response's Pierre Cadieux says the first thing he checks in an engagement is the customer's logs, and without them he is limited in the insights he can provide. He notes this has come up several times during the SolarWinds era, when customers wanted to know if they were targeted in the widespread supply chain attack, and he makes the case for keeping logs for log-ins, events, applications and more.
Key Takeaway: During the SolarWinds supply chain attack, customers asking whether they were targeted could only be answered to the extent their logs existed - and missing logs left responders with little to work from.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026