NIST800-92 Guide to Computer Security Log Management(日志管理手册)

Karen Kent@NIST, Murugiah Souppaya@NIST

NIST LOG 日志管理

This publication seeks to assist organizations in understanding the need for sound computer security log management. It provides practical, real-world guidance on developing, implementing, and maintaining effective log management practices throughout an enterprise. The guidance in this publication covers several topics, including establishing log management infrastructures, and developing and performing robust log management processes throughout an organization. The publication presents log management technologies from a high-level viewpoint, and it is not a step-by-step guide to implementing or using log management technologies.

• Executive Summary
• Introduction
• Introduction to Computer Security Log Management
• Log Management Infrastructure
• Log Management Planning .
• Log Management Operational Processes
• Configure Log Sources
• Analyze Log Data
• Respond to Identified Events
• Manage Long-Term Log Data Storage
• Provide Other Operational Support
• Perform Testing and Validation
• Summary