AU-6(5)_integrated-analysis-of-audit-records
Integrate analysis of audit records with analysis of [organization-defined] to further enhance the ability to identify inappropriate or unusual activi
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Integrate analysis of audit records with analysis of [organization-defined] to further enhance the ability to identify inappropriate or unusual activi
Correlate information from audit records with information obtained from monitoring physical access to further enhance the ability to identify suspicio
Specify the permitted actions for each [organization-defined] associated with the review, analysis, and reporting of audit record information.
Perform a full text analysis of logged privileged commands in a physically distinct component or subsystem of the system, or other system that is dedi
Correlate information from nontechnical sources with audit record information to enhance organization-wide situational awareness.
Review and analyze system audit records [organization-defined] for indications of [organization-defined] and the potential impact of the inappropri...
Provide and implement the capability to process, sort, and search audit records for events of interest based on the following content: [organization-d
Automatic Sort and Search
Provide and implement an audit record reduction and report generation capability that: Supports on-demand audit record review, analysis, and reporting
Synchronization with Authoritative Time Source