What is 日志保留?
In this glossary, 日志保留 refers to: The process and policy of securely retaining security event and audit logs for a defined period to ensure availability for investigations, compliance, and forensic analysis.
How is 日志保留 used in cybersecurity?
In cybersecurity communication, this term appears in contexts such as: "日志保留政策确保在原始事件发生几个月后，取证调查期间仍可获得关键事件数据。"
Why does 日志保留 matter in cybersecurity?
日志保留 matters because it supports clear communication in SOC contexts for SOC Analysts, Security Engineers, and Incident Responders. It also connects to aviation training and exam language such as CISSP, CompTIA Security+, and CEH.
Who uses 日志保留?
日志保留 is mainly used by SOC Analysts, Security Engineers, and Incident Responders.
What category does 日志保留 belong to?
In this glossary, 日志保留 is grouped under SOC. Related pages in this category explain adjacent procedures, commands and operational concepts.
Where does this definition come from?
This definition is sourced from ISO 27001, NIST Cybersecurity Framework, MITRE ATT&CK and published by Protermify Cybersecurity as a static cybersecurity reference page.
