Evidence: Level Logs
Description: Collect Level Application Specific Files and Logs
Category: Applications
Platform: windows
Short Name: levellgs
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Level (formerly Level.io) is an MSP-focused remote monitoring and management platform that maintains logs of remote access, monitoring activities, and management operations.
Data Collected
This collector gathers structured data about level logs.
Collection Method
This collector gathers log files from the Level installation directory containing RMM agent activity and connection records.
Forensic Value
Level logs help investigate RMM-based attacks and unauthorized remote management activities. They reveal remote sessions, monitoring activities, and can identify abuse of MSP tools for malicious access.
