Level Logs
Overview
Section titled “Overview”Evidence: Level Logs
Description: Collect Level Application Specific Files and Logs
Category: Applications
Platform: windows
Short Name: levellgs
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Section titled “Background”Level (formerly Level.io) is an MSP-focused remote monitoring and management platform that maintains logs of remote access, monitoring activities, and management operations.
Data Collected
Section titled “Data Collected”This collector gathers structured data about level logs.
Collection Method
Section titled “Collection Method”This collector gathers log files from the Level installation directory containing RMM agent activity and connection records.
Forensic Value
Section titled “Forensic Value”Level logs help investigate RMM-based attacks and unauthorized remote management activities. They reveal remote sessions, monitoring activities, and can identify abuse of MSP tools for malicious access.