We are about to have someone do some external pen testing. i know its this week but my boss wants me to monitor activity on the firewall and syslogs and such. he wants me to discover the activity and come to him with it. I am obvioulsy still in traning on this stuff and would really appreciate anyones advice on what i should be looking for and where i can find this info? where are sys logs typicaly located?
