Josh Lemon<p>If you're interested in getting into <a href="https://infosec.exchange/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Linux</span></a> <a href="https://infosec.exchange/tags/logging" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>logging</span></a> and evidence collection, this is an excellent write-up from <span class="h-card" translate="no"><a href="https://mastodon.socialspill.com/users/kostastsale" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>kostastsale</span></a></span> that compares <a href="https://infosec.exchange/tags/EVTX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>EVTX</span></a> logs on Windows with <a href="https://infosec.exchange/tags/Auditd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Auditd</span></a>, <a href="https://infosec.exchange/tags/SysMon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SysMon</span></a> for Linux, and native Linux logging.</p><p><a href="https://infosec.exchange/tags/DFIR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DFIR</span></a> <a href="https://infosec.exchange/tags/LinuxForensics" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>LinuxForensics</span></a> <a href="https://infosec.exchange/tags/SIEM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SIEM</span></a> <a href="https://infosec.exchange/tags/CSIRT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CSIRT</span></a></p><p><a href="https://kostas-ts.medium.com/telemetry-on-linux-vs-windows-a-comparative-analysis-849f6b43ef8e" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">kostas-ts.medium.com/telemetry</span><span class="invisible">-on-linux-vs-windows-a-comparative-analysis-849f6b43ef8e</span></a></p>