- `aureport`can be used for `audit.log` - take time on web portions to narrow down vuln types -