Reference document

Title
Cyber Collection Management Application
Description

The Cyber Collection Management Application enables users to configure the retention and retrieval of sensor data necessary for the detection of sophisticated malicious activities. Sensor data includes network traffic, audit/event log (including those generated by other CIS security devices such as intrusion detection systems), and collected operating system and application artifacts. Based on operational parameters defined by the users, available resources, and recognized patterns in previously collected data, the Cyber Collection Management Application can also automatically and continually optimize sensor data collection and retention. The application provides coherent access to all sensor data for further analysis. It reports when it fails to collect sensor data due to resource limitations.

Level
6
emUUID
a07e20a9-e234-4b4c-8661-e8692a2f9e2c
Parent
CIS Security Defence Applications