Webserver threats in this mindmap

[clevilll]

Hi, I was wondering if your mindmap overs webserver threats based on web server logs. I see on the left side Analysing Registry but can you list those specific threats that can be found through web server log or in general log analysis?

[HellishPn]

Hi, you can dump logs with "evtlogs" but this tool is mostly used in system based forensic scenarios, but if you want to analyze a web attack you can't get so much out of this tool and you have to consider that this tool will analyze a dumped memory and cant interact with Web Applications, on the other hand in server-side you can use it to figure out the attacks against servers (against OS ) such as rootkit (as a process) or buffer overflow, for recap its rarely used on the web-side but if you have any specific situation you can use it either