Glossary: Attacks and Indicators
pivot
In an investigation, taking a clue found in one log, such as an IP address, username or file hash, and searching for it in every other log. It links events across systems, for example tying a break-in in an auth log to a beacon in a firewall log.