Post #3894782

2026-07-17 20:41 UTC

@Viss@mastodon.social why the f*ck do they need AI for 17k log lines? Throwing AI at an Incident and calling it "forenaics" is the laziest incident response I've ever seen.

Replies (3)

@afeinman@wandering.shop 2026-07-17 20:46

@g0rb@infosec.exchange @Viss@mastodon.social @cR0w@infosec.exchange "I have invented a new AI!" "Is it grep again, but slower and wrong?" "No! ...yes."

Open ##3894890
@g0rb@infosec.exchange 2026-07-17 20:46

@Viss@mastodon.social I would love to have incidents with 17k of log entries. A normal Plaso/Log2Timeline output has easily more than 2 Million lines and even they can be easily analyzed with Klogg as an log viewer. The hell you can even use grep for such pathetic stuff and their first idea is "Frontier AI Model"? Exactly that's the reason why companies get (more or less) independent, external forensics. If you can't defend your environment to a certain degree (and honestly, nobody hates on you when you get pwned by nation state threat actors) then you are far away from the skill level needed for good digital forensics.

Open ##3894891
@jonathankoren@sfba.social 2026-07-17 20:52

@g0rb@infosec.exchange @Viss@mastodon.social ahh I remember when 17k lines was called “big data” and needed whole compute cluster for Hadoop, instead of a python script run on an underpowered laptop

Open ##3895065