Skip to main content

Service Log Capture

CCC.Logging.CP01

The service can be configured to collect logs emitted by other cloud services at the level of verbosity selected for each source.

Related Threats

IDTitleDescription
CCC.Logging.TH06Forged or Malformed Entries are Written to LogsUser-supplied data containing line breaks, control characters, or escape sequences may be written to logs without proper encoding or sanitization. Injected content can forge additional log records, split or truncate genuine entries, or disrupt downstream parsers, so the stored audit trail no longer reflects what occurred, reducing the integrity of log data.
CCC.Logging.TH07Security-relevant Events are Not LoggedSecurity-critical actions may not be logged because log capture is not enabled for a source, verbosity is set too low, or a filter or transformation rule discards the relevant entries at ingestion. The events are absent from the log store, so threats go undetected and post-incident analysis lacks evidence, reducing the integrity and availability of the audit trail.