Jump to content

Rule-Based Event Correlation

From Hackerpedia
Revision as of 00:24, 20 January 2026 by imported>Unknown user
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Languages: English | Français

Rule-Based Event Correlation

Correlating events by matching multiple log entries from a single source or multiple sources based on logged values, such as timestamps, IP addresses, and event types.


Source: NIST SP 800-92 | Category: