logging news
3 stories
OMB M-26-14: Why federal agencies must fix asset visibility first
The Office of Management and Budget (OMB) has released Memorandum M-26-14, a significant update to federal agency cybersecurity requirements, focusing on enhanced logging and network visibility. This new directive supersedes M-21-31, shifting away from broad data retention mandates towards a more structured, risk-based approach.
Uncommon NIMLOC DNS Record Type Observed
The SANS Internet Storm Center is drawing attention to an unusual DNS record type, NIMLOC, that has recently been detected within network traffic logs. The purpose and origin of these records are not immediately clear, prompting investigation by security professionals.
Azure AD Graph Activity Logs: Ingestion and threat detection to close the visibility gap
Azure AD Graph activity logs are now accessible within Elastic, enabling threat detection capabilities for security teams. Previously, this specific stream of telemetry was largely unavailable to customers for nearly a decade. Microsoft Graph Activity Logs, the newer interface, became generally available in April 2024, but the legacy graph.windows.net surface, frequently targeted by adversary…