audit reduction tools

{
  "id": "MLC-T-CYB-000310",
  "term": "audit reduction tools",
  "field": "Cybersecurity",
  "definition": "Preprocessors designed to reduce the volume of audit records to facilitate manual review. Before a security review, these tools can remove many audit records known to have little security significance. These tools generally remove records generated by specific classes of events, such as records generated by nightly backups.",
  "references": [
    "CNSSI 4009-2022",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/audit-reduction-tools/"
}