{"id":4897,"date":"2017-09-18T13:30:56","date_gmt":"2017-09-18T13:30:56","guid":{"rendered":"https:\/\/dev.epictranslations.com\/?p=4897"},"modified":"2023-05-19T18:44:38","modified_gmt":"2023-05-19T18:44:38","slug":"document-security-network-log-forensics-analysis","status":"publish","type":"post","link":"https:\/\/dev.epictranslations.com\/fre\/document-security-network-log-forensics-analysis\/","title":{"rendered":"Document Security: Network Log Forensics Analysis"},"content":{"rendered":"

EPIC Translations was hired by an existing client to provide network log forensics analysis.<\/p>\n

EPIC Translations was approached by an existing client to provide network log forensics analysis<\/strong>. The client had an indication that a competitor had accessed their network and viewed proprietary business information and documents. EPIC Translations<\/a> faced multiple challenges in performing the analysis on the network logs due to several reasons. The client did not have an explicit time frame of when this event occurred. This caused the text log file data set to be over 8 Gigabytes in size<\/strong>.The dataset was also incomplete due to missing logs, making it more difficult to build an accurate timeline of events. The client was also unsure of all IP address ranges of the competitor.<\/p>\n

The consultants at EPIC Translations first had to find all associated IP address ranges of the competitor<\/strong>. Once that was established, the data set was divided up to make searching more efficient. Our consultants then created a command line tool to parse log files for relevant data. Due to the sheer volume of data the extraction took multiple days.<\/p>\n

After data extraction was performed it was determined the competitor had indeed accessed the network after the close of business hours. EPIC Translations was able to provide concrete evidence that supported our client\u2019s claim.<\/p>\n

DISCLAIMER:<\/strong><\/h3>\n