Forensics

Kind: capability

Layer: Observability

Record: lexicon:forensics

Canonical: Lexicon

The ability to reconstruct after the fact what happened from an immutable audit record.

Listed in Lexicon terms, after Actor and before Privacy.

Category

• Observability / Auditability / Traceability

Enabled by

• Audit Logging

Linked from

• Observability / Auditability / Traceability