Why could network Syslog servers be a target for threat actors?

IT Questions Bank › Category: Network Defense › Why could network Syslog servers be a target for threat actors?

Why could network Syslog servers be a target for threat actors?

Syslog servers are usually not installed behind a firewall.
Syslog servers contain configurations and passwords for all devices on the network.
Syslog data could be encrypted by the attacker and used as ransomware.
Syslog servers could contain information that could lead to the detection of an exploit by a hacker.