[USHE-assess] Question about the keylogger use at USU

Hey Jake or anybody else that may know,

One of our DBAs is going through the keylogger data from the USU assessment to make sure they clean up from any of the damage. He’s surprised that there doesn’t appear to be “that much” data in the keylogger files. I wanted to tell him to queue the “office space” soundtrack, but said I’d ask you guys instead.

Do you know if the keylogger file is truncated at all, is there a limit to the amount of data it can store and if there could have been more logged than there was on both of the days it was used?

In other words, do you think that logs contain the full sessions on the days they were used?

Thanks, -Allen