Recent waves of cybercrime underscore the importance of increased government visibility before, during, and after a cybersecurity incident. As adversaries continue to target government networks and other infrastructure, efficient event logging is crucial in identifying, investigating, and preventing attacks. President Biden’s May 2021 executive order on cybersecurity set new requirements for event logging, and Office of Management and Budget memorandum M-21-31 in August 2021 provided guidance for agencies on how to meet those requirements.
[…]