Audit Reduction Tools

February 8, 2018

How Can We Help?

You are here:
< Back

Preprocessors designed to reduce the volume of audit records to facilitate manual review. Before a security review, these tools can remove many audit records known to have little security significance. These tools generally remove records generated by specified classes of events, such as records generated by nightly backups.
SOURCE: SP 800-12; CNSSI-4009