# MySQL Logs

## Overview

**Evidence:** MySQL Logs\
**Description:** Collect MySQL Logs\
**Category:** Applications\
**Platform:** aix\
**Short Name:** myl\
**Is Parsed:** No\
**Sent to Investigation Hub:** No\
**Collect File(s):** Yes

## Background

MySQL database server logs on macOS capture database queries, errors, slow queries, authentication events, and server operations. Log locations vary based on installation method (system, Homebrew Intel, Homebrew Apple Silicon).

## Data Collected

This collector gathers structured data about mysql logs.

## Collection Method

This collector gathers MySQL logs from system directories and Homebrew installations, covering both Intel-based and Apple Silicon architectures, including user-specific Homebrew log directories.

## Forensic Value

MySQL logs are critical for investigating SQL injection attacks, unauthorized database access, data breaches, privilege escalation, and understanding database compromise. They provide query history, authentication attempts, and error patterns.
