8. Appendices

• 8.1. Event files
  • 8.1.1. Detection engine events: detection-engine-logs
  • 8.1.2. Kernel related events: var-log-kernel
  • 8.1.3. GCap authentication information: var-log-auth
  • 8.1.4. Information on the activity of the various applications used: var-log-daemon
  • 8.1.5. User activity information: var-log-user
  • 8.1.6. Debug events: var-log-debug
  • 8.1.7. Aggregation of different logs: var-log-messages
  • 8.1.8. Scheduled task start information: var-log-cron