Re: Canaries!
I like your thinking however as they are aware of the when/how/where of sys logs it wouldn't be that difficult to fake said logs even if they were on another machine as once you own the machine sending the logs it's pretty simple.
Fear the invisible mighty super hackers that may or may not exist, nobody would ever know.
Biting the hand that feeds IT
