Title: what is the generally accepted best practice to be monitoring web logs for anomalous accesses ?<p>do you guys just throw cloudflare in front and forget about it ? Or do you have engineers who work like data scientists - eyeball the logs ?<p>I have heard suggestions of using a firewall - but I&#x27;m genuinely curious on how do security focus companies discover things like &quot;oh, we got attacked by Bitcoin miners from North Korea&quot;. Are there sophisticated tools that do this for you.. or is there a generally accepted practice that has evolved for even regular engineers to do this ?<p>P.S. I&#x27;m personally more interested in an API-focused answer, but I guess the same thing applies for websites.
Upvote: