AU-3: Content of Audit Records

From NIST's SP800-53:

Ensure that audit records contain information that establishes the following: a. What type of event occurred; b. When the event occurred; c. Where the event occurred; d. Source of the event; e. Outcome of the event; and f. Identity of any individuals, subjects, or objects/entities associated with the event.

Cyber Threat Graph Context

Explore how this control relates to the wider threat graph