&gt; Note that a skilled attacker would likely remove these entries from the log file, thus effectively eliminating any reliable signature that the device had been compromised<p>Sending logs off as they&#x27;re written to a centralized logging server or a time-series database would have been useful in this context.