So, every time something happens on the server, that action gets stored as an entry in the audit log. But the log is configured to only hold 20MB of data. Once the log file hits 20M, every time a new log entry gets added, it will delete the oldest entry from the log to make sure it stays under that 20MB limit. Someone executed enough empty password login attempts (37k+) in one day to push every single log entry from election day and more out of the log. Because they don't want to turn over the router logs, they do not know who did this.
So Maricopa County they used a script to log in on the EMS so it would remove the log ins from the time-frame of the election.
lmao, you cant make this shit up
Yeah that kinda went over my head a tad... but it seemed really important.
So, every time something happens on the server, that action gets stored as an entry in the audit log. But the log is configured to only hold 20MB of data. Once the log file hits 20M, every time a new log entry gets added, it will delete the oldest entry from the log to make sure it stays under that 20MB limit. Someone executed enough empty password login attempts (37k+) in one day to push every single log entry from election day and more out of the log. Because they don't want to turn over the router logs, they do not know who did this.
It's a pity that all electronic transactions aren't gathered up and stored by a govt agency controlled by the military.
Oh wait .... ;-P
It's a pity they refuse to use it.
What OS? Sorry I was in meetings literally all day and haven’t had a chance to start catching up until now
Windows Server
Thank you. I was listening, but this part eluded me.