Logging issues were identified including incorrect time synchronization across logs, logging of sensitive information like passwords and credit card numbers, and unauthorized access to log files. Logs need accurate timestamps for forensic investigation and protection as they may contain sensitive data. The document discusses exploring these logging issues in more detail in a lab.

1. Logging
Inappropriate logging.

2. Types Of Issues
Incorrect time synchronization.
Logging of sensitive information.
Unauthorized access to logs.

3. Incorrect Time Synchronization
If the time of the logs is desynchronized it will make it difficult to
perform forensic investigation in case of a break-in.

4. Logging Of Sensitive Information
Some types of information such as user session ids, passwords, credit
card numbers, cvv data and more should not be logged.

5. Unauthorized Access To Logs
Log files may contain sensitive data and therefore needs to be protected.

6. Lab
We will explore some of these areas in more detail.