2 docs tagged with "anomalias"

Strategies for correlating logs across sources and detecting suspicious behaviour.

Organisational policy that defines the requirements for security monitoring in production, including the definition of critical events, SIEM integration, behavioural correlation, coverage of monitoring domains and periodic review of detection rules, proportional to the criticality level (L1, L2, L3).