+DE.AE-02 Potentially adverse events are analyzed to better understand associated activities

DE.AE-02 Potentially adverse events are analyzed to better understand associated activities

Statement

Potentially adverse events are analyzed to better understand associated activities

Guidance

Use security information and event management (SIEM) or other tools to continuously monitor log events for known malicious and suspicious activity

Guidance

Utilize up-to-date cyber threat intelligence in log analysis tools to improve detection accuracy and characterize threat actors, their methods, and indicators of compromise

Guidance

Regularly conduct manual reviews of log events for technologies that cannot be sufficiently monitored through automation

Guidance

Use log analysis tools to generate reports on their findings

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by Incident Classification & Prioritization
is blocked by Incident Handling