Problem
1. What are the main elements of a UNIX syslog facility?
2. Explain how an interposable library can be used for application-level auditing.
3. Explain the difference between audit review and audit analysis.
4. What is a security information and event management (SIEM) system?