Skip to main content

Management / Auditlog

Capabilities

Version:
IDTitleDescriptionThreat Mappings
CCC.AuditLog.CP01Default Retention PeriodCloud providers support a default minimum retention of audit log data.0
CCC.AuditLog.CP02ExportSupport for manual "one off" exporting or downloading of raw log events.0
CCC.AuditLog.CP03SinkAbility to continually stream audit log data to a hosted storage bucket or data lake solution.2
CCC.AuditLog.CP04Event TypesAudit events are generated with different data types to provide specific fields for the system which generated the event, such as Management Event, Data Event and Policy Event.0
CCC.AuditLog.CP05Time SearchAbility to search for audit events across a specific time range.0
CCC.AuditLog.CP06FilteringAbility to filter audit events based on specific attribute.0
CCC.AuditLog.CP07Immutable Log EntriesAudit Log events are immutable and cannot be altered or deleted once generated.0
CCC.AuditLog.CP08External SinkAudit log events can be configured to be sent to a external SIEM or data analysis provider outside of the cloud platform.2

Imports

IDRemarks
CCC.Core.CP01Encryption in Transit Enabled by Default
CCC.Core.CP02Encryption at Rest Enabled by Default
CCC.Core.CP03Access Log Publication
CCC.Core.CP06Access Control
CCC.Core.CP07Event Publication
CCC.Core.CP08Data Replication
CCC.Core.CP09Metrics Publication
CCC.Core.CP10Log Publication
CCC.Core.CP14API Access
CCC.Core.CP17Alerting