SECFND Question DATA/LOG

UsualSuspect7

What's the difference between: Logs and Data

1) Cisco Press Book
A) Session Log:
- "Track changes made on managed host during a web-based system manager session"

1) Majority of Websites: https://vwannabe.com/2017/02/07/ccna-cyber-ops-5-0-security-monitoring/
has a breakdown and define of the exam objectives; nothing intrusive and it's public information*



Session Data:
"Session data is the summary of the communication between two network devices. Also known as a conversation or a flow, this summary data is one of the most flexible and useful forms of NSM (Network Security Monitoring) data."


This doesn't make sense at all!!!




Also to note I did notice a few issues with the cisco press book, but i can't find any web resources to corroborate these anomalies?

nisti2

According to the material:

A log is a record that is related to activity occurring on a system.

Session Data is all the conversation that a monitoring system can see for example: 5-tuple with time stamps, total byte counter.

Hope this helps,

Regards.