>I don’t agree with your analogy. The post-arrest reports that the police fill out is closer to the audit log. A better analogy for SWEs would be keyloggers imo

>I don’t agree with your analogy. The post-arrest reports that the police fill out is closer to the audit log. A better analogy for SWEs would be keyloggers imo. Which everyone should have enabled for the exact same reasons: auditing All SSH sessions (every character you send) to our qa and higher environments are recorded and saved for later auditing.