A municipal SOC suspects slow, low-and-slow abuse against wireless…

Question

A municipal SOC suspects slow, low-and-slow abuse against wireless authentication. Which audit technique best looks for that pattern over time?

Accepted Answer

Perform system log analysis of RADIUS and WIPS events across a multi-month window such as 90 days. — Slow-burn attacks hide in the long movie, not the five-minute trailer. Dig through months of RADIUS and WIPS logs to see the pattern. Short captures alone miss the drip-drip story.

Answer

Inspect only a five-minute live packet capture and ignore historical RADIUS and WIPS logs.

Answer

Delete RADIUS logs weekly so long-term patterns cannot be reconstructed.

Answer

Analyze only cafeteria POS wired logs and skip WLAN authentication sources.

A municipal SOC suspects slow, low-and-slow abuse against wireless authentication. Which audit technique best looks for that pattern over time?

Short Explanation

Full Explanation