AU-3: Content of Audit Records
From NIST's SP800-53:
Ensure that audit records contain information that establishes the following: a. What type of event occurred; b. When the event occurred; c. Where the event occurred; d. Source of the event; e. Outcome of the event; and f. Identity of any individuals, subjects, or objects/entities associated with the event.
Cyber Threat Graph Context
Explore how this control relates to the wider threat graph