In Incident Response we often get called in to customer engagements
after an incident has occurred (yeah, I know, that is why it is called
Response). Unfortunately, not all organisations we work with have
centralised log collection … or if they do, t...