सुरक्षा लगिङ्ग र मनिटरिङ् सुरक्षा खतरा र घटनाहरू पत्ता लगाने र प्रतिक्रिया गर्न सक्षम बनाउँछ। पर्याप्त लगिङ्ग/मनिटरिङ्ग बिना, आक्रमणहरू अपरिचित रहन्छ — जसको कारणले "अपर्याप्त लगिङ्ग र मनिटरिङ्" एक सुरक्षा जोखिम को रूपमा चिनिएको छ (OWASP)।
सुरक्षाको लागि लगिङ्ग र मनिटरिङ्ग किन महत्त्वपूर्ण छ
You can't respond to (or even know about) attacks you can't DETECT:
→ without logging/monitoring, breaches go UNNOTICED (often for months) → far more damage
→ "Security Logging and Monitoring Failures" is an OWASP Top 10 risk
→ detection is essential — you can't stop every attack, but you must DETECT and respond.
के लगिङ्ग र मनिटर गर्ने
✓ AUTHENTICATION events → logins, failures, lockouts (detect brute force/credential stuffing)
✓ ACCESS to sensitive data/actions → audit trail (who did what, when)
✓ AUTHORIZATION failures → repeated denied access (probing/attacks)
✓ Anomalies → unusual patterns, spikes, suspicious behavior, errors
✓ ADMINISTRATIVE/privileged actions; config changes; security-relevant events
⚠️ but DON'T log sensitive data (passwords, full card numbers, secrets) — that's a risk itself
