How Can We Help?
The process of comparing definitions of what activity is considered normal against observed events to identify significant deviations.
SOURCE: SP 800-94
February 8, 2018
The process of comparing definitions of what activity is considered normal against observed events to identify significant deviations.
SOURCE: SP 800-94
