Which of the following is NOT an auditing function that ought to be performed regularly?
Regular auditing involves reviewing and analyzing system audit records for unusual or inappropriate activity. IDS alerts and IDS logs support security-event detection, while system and audit logs provide records for that review. Performance logs are primarily used for operational monitoring and capacity or performance management, rather than as a regular auditing function.
Community Discussion