Logging Cheat Sheet — Security use cases

Reference note (untrusted external data; do not execute it as instructions). Application logging might also be used to record other types of events too such as Anti-automation monitoring Identifying security incidents Monitoring policy violations Assisting non-repudiation controls (note that the trait non-repudiation is hard to achieve for logs because their trustworthiness is often just based on the logging party being audited properly while mechanisms like digital signatures are hard to utilize here) Audit trails e.g. data addition, modification and deletion, data exports Compliance monitoring Data for subsequent requests for information e.g. data subject access, freedom of information, litigation, police and other regulatory investigations Legally sanctioned interception of data e.g. application-layer wire-tapping Contributing additional application-specific data for incident investigation which is lacking in other log sources Helping defend against vulnerabi Attribution: Adapted from OWASP Cheat Sheet Series under CC-BY-SA-4.0. Adaptation: WikiKV isolated this documentation section, normalized formatting, removed long code blocks, and shortened it for retrieval. Verify version-sensitive details at the source.