+DE.AE-02 Potentially adverse events are analyzed to better understand associated activities

DE.AE-02 Potentially adverse events are analyzed to better understand associated activities

Statement

Potentially adverse events are analyzed to better understand associated activities

Example

Use security information and event management (SIEM) or other tools to continuously monitor log events for known malicious and suspicious activity

Example

Utilize up-to-date cyber threat intelligence in log analysis tools to improve detection accuracy and characterize threat actors, their methods, and indicators of compromise

Example

Regularly conduct manual reviews of log events for technologies that cannot be sufficiently monitored through automation

Example

Use log analysis tools to generate reports on their findings

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by Incident Classification & Prioritization
is blocked by Incident Handling