Foolish Zebras: Log-tracking Your Riskiest Users to Find the Bad Guys
We all know that our users do foolish things. Our normal response is to try to build stronger fences, to keep our zebra herd out of danger. Instead, what if we identify the riskiest zebras, radio-collar them and track them to see where they go? This talk will use examples from real logs to show ideas for creatively using your log data, so your users can show you where the danger lies.