new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

OWASP Cheat Sheets · all subjects

logging/sensitive_data

4 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

sensitive_create event logging

Log creation of sensitive data with event name 'sensitive_create' followed by userid and file or object path. Level is WARN. Log when new data is created and marked as sensitive or placed in a directory/table where sensitive data is stored.

sensitive_read event logging

Log access to sensitive data with event name 'sensitive_read' followed by userid and file or object path. Level is WARN. All data marked as sensitive or in directories/tables where sensitive data is stored should have access logged.

sensitive_update event logging

Log modifications to sensitive data with event name 'sensitive_update' followed by userid and file or object path. Level is WARN. All data marked as sensitive or in directories/tables where sensitive data is stored should have updates logged.

sensitive_delete event logging

Log deletion of sensitive data with event name 'sensitive_delete' followed by userid and file or object path. Level is WARN. Files should not be immediately deleted but marked for deletion and an archive maintained per legal/privacy requirements.

Give your agent this brain