In MacOS, security-related logs are typically stored in the /private/var/log directory. This location is used to store various system logs, including authentication attempts and other security events.
The secure.log file within this directory is particularly relevant for tracking security incidents, as it records authentication attempts and other security-related events. It's important for network defenders like Rosa to be familiar with these log locations to monitor and respond to potential security issues on the systems they manage.