Test and Verification -> Static depth for infrastructure: Analyze logs
Risk and Opportunity
Risk: Not aware of attacks happening.
Opportunity: Check logs for keywords.
Usefulness and Requirements of this Activity
Required knowledge: Low (one discipline)
Required time: Low
Required resources (systems): Low
OWASP SAMM VERSION 2