Audit and content-based monitoring

• Analysis of audit trails after the fact

  • Analysis of the PCs in a network
  • Analysis of file servers
  • Analysis of usage patterns

• Correlation of events

  • Analysis of correlate network events
  • Analysis of work-behavior and behavioral changes
  • Searching for know-bad things

Notes: