Hello, We want to check the log settings (e.g.attributes need to be logged) of tomcat server and then evaluate the security level for the application. I am evaluating over a well-built system so what I can obtain is only its binary code and configuration files. Is there any way we can infer the log settings automatically?
Thank you, -- Su Zhang Ph.D Candidate Computing and Information Sciences Kansas State University