Logging - Revision history

Sam: /* Logging Design */

2022-07-25T14:29:22Z

Logging Design

Sam at 14:27, 25 July 2022

2022-07-25T14:27:27Z

Sam: /* The Desktop */

2022-07-25T14:16:59Z

The Desktop

Sam: /* Logging Design */

2022-07-25T13:58:43Z

Logging Design

Sam at 13:57, 25 July 2022

2022-07-25T13:57:15Z

Sam: /* The Installer */

2022-07-25T13:41:31Z

The Installer

Sam: Created page with "This article discusses the many different logs in Truxton and why. =Logging Design= Truxton is designed to have a front-end GUI for humans to interact with as well as back-en..."

2022-07-25T13:20:43Z

Created page with "This article discusses the many different logs in Truxton and why. =Logging Design= Truxton is designed to have a front-end GUI for humans to interact with as well as back-en..."

New page

This article discusses the many different logs in Truxton and why.

=Logging Design=
Truxton is designed to have a front-end GUI for humans to interact with as well as back-end systems that humans are not meant to see.
This leads to different logging systems being employed.

=The Installer=
Where? Why?

=The Desktop=
The Analyst Desktop is a Windows application.
It writes

=The Truxton Service=
Logs to the [https://docs.microsoft.com/en-us/windows/win32/wes/windows-event-log Application Log]

← Older revision		Revision as of 14:27, 25 July 2022
Line 34:		Line 34:
	This will allow you to follow each file created during exploitation as it flows through every [[ETL Stages\|ETL]].		This will allow you to follow each file created during exploitation as it flows through every [[ETL Stages\|ETL]].
	You can use commercial syslog servers, Truxton's [[Turn on Syslogging#Syslog.Server\|server]] or syslog running on a separate machine.		You can use commercial syslog servers, Truxton's [[Turn on Syslogging#Syslog.Server\|server]] or syslog running on a separate machine.
		+
		+	=The Load Log=
		+	[[Load]] and all ETLs will write to the [[Type_Load_Log\|Load Log]] as well as [https://en.wikipedia.org/wiki/Syslog syslog].
		+	Since any number of processes running on any number of machines write to the Load Log, it doesn't physically exist until the load is [[Finished\|finished]].
		+	This magic is accomplished by the different processes writing to the <code><nowiki>[</nowiki>[[Log Table\|Log]]<nowiki>]</nowiki></code> table in the database.

@@ Line 6: / Line 6: @@
 =The Installer=
-The installer is made of two pieces, <code>Truxton_Installer.exe</code> and <code>Truxton.msi</code>.
+The installer is made of two pieces, <code>Truxton_Installer.exe</code> and <code>Truxton.msi.</code>
 The executable will gather information about the system and use it to feed parameters to the [https://docs.microsoft.com/en-us/windows/win32/msi/standard-installer-command-line-options Microsoft Installer].
 The program will detail its every thought to the [[Log File Locations#Setup|log file]].
 It will tell Microsoft Installer write to a log in the user's [https://en.wikipedia.org/wiki/Environment_variable#LOCALAPPDATA local app data] <code>Low</code> folder.
 This folder is writable from the Microsoft Installer as it switches between user and Administrator mode.
-Once the Microsoft Installer is finished, control is passed back to <code>Truxton_Installer.exe</code> which will complete the installation process.
+Once the Microsoft Installer is finished, control is passed back to <code>Truxton_Installer.exe</code> which will complete the installation steps.
 =The Desktop=
@@ Line 18: / Line 18: @@
 =The Truxton Service=
-Logs to the [https://docs.microsoft.com/en-us/windows/win32/wes/windows-event-log Application Log]
+Logs to the [https://docs.microsoft.com/en-us/windows/win32/wes/windows-event-log Application Log].

@@ Line 4: / Line 4: @@
 There are several places and situations where things are logged.
 Truxton is designed to have a front-end GUI for humans to interact with as well as back-end systems that humans are not meant to see.
-This leads to different logging systems being employed.
+This leads to different logging systems being employed for different purposes.
 =The Installer=

@@ Line 15: / Line 15: @@
 =The Desktop=
-The Analyst Desktop is a Windows application.
+The Analyst Desktop is a Windows application and writes events to the log during the execution of the program.
-It writes
+Any errors or warnings that aren't worthy of displaying to the user are written here.
 =The Truxton Service=