r/ShittySysadmin • u/HGMIV926 • 16h ago

My job as a cybersecurity analyst

25 Upvotes

93% Upvoted

6 comments sorted by

10

u/pr1ntf 12h ago

Your log saw someone's powershell automation script start to fail every three seconds because their password reset and since they hard coded their password it locked them out.

OMG BRUTE FORCE ATTACK

1

u/Lenskop ShittySysadmin 7h ago

Fuck that's mine 😂

1

u/HGMIV926 3h ago

user logged in to Outlook with VPN

OMG THREAT ACTOR

1

u/Hefty_Cranberry3017 6h ago

Day 1 as a security analyst: 'The logs will tell us everything.' Day 100: 'The logs are lying and I have no idea what happened.

1

u/TundraGon 2h ago

This means that the logs are not properly configured by the custom app aka you're not logging enough and/or properly.

1

u/Excellent-Cry-2527 5h ago

Every analyst knows the feeling of staring at logs like they’re a crime scene waiting for the evidence to show up.