You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Ideally, all events are created on a locked down server and only ever transferred securely. But in some organisations / situations it might be appropriate or necessary to:
Transfer via Syslog UDP,
Transfer manually,
Create on a client-side process under user control.
Etc.
Therefore, it would be useful to record the level of veracity of the event, so it can be taken into account later, as necessary (e.g. treated with a degree of suspicion!)
Don't know the best way to do this, as ideally some information about the provenance of the event would be recorded. But it is probably sufficient to roll up into a single value (High/Medium/Low), at least for a first version.
The text was updated successfully, but these errors were encountered:
Ideally, all events are created on a locked down server and only ever transferred securely. But in some organisations / situations it might be appropriate or necessary to:
Therefore, it would be useful to record the level of veracity of the event, so it can be taken into account later, as necessary (e.g. treated with a degree of suspicion!)
Don't know the best way to do this, as ideally some information about the provenance of the event would be recorded. But it is probably sufficient to roll up into a single value (High/Medium/Low), at least for a first version.
The text was updated successfully, but these errors were encountered: