Skip to content

Hide Navigation Hide TOC

Function: Cross-incident correlation (1eb8496d-9383-5b95-909b-59670113537f)

This function involves the correlation of available information about multiple information security incidents to determine interrelations, trends, or applicable mitigations from already closed information security incidents to improve the response to currently handled information security incidents.

Cluster A Galaxy A Cluster B Galaxy B Level
Function: Cross-incident correlation (1eb8496d-9383-5b95-909b-59670113537f) FIRST CSIRT Services Framework Service: Information security incident analysis (005c1e64-40dd-5b83-a5b0-15927707e58a) FIRST CSIRT Services Framework 1