Detections
Analytics
CSCv6|6.4
Title
Have security personnel and/or system administrators run biweekly reports that identify anomalies in logs.Description
Have security personnel and/or system administrators run biweekly reports that identify anomalies in logs. They should then actively review the anomalies, documenting their findings.Reference Item Details
Reference: CIS Critical Security Controls v6
Category: Maintenance, Monitoring, and Analysis of Audit Logs
Family: System