Any system can collect logs, but most security operations do a poor job of filtering them to find evidence of malicious activity. Here's where to start Most malicious computer attacks leave telltale ...