Skip to content

Glossary: Attacks and Indicators

pivot

In an investigation, taking a clue found in one log, such as an IP address, username or file hash, and searching for it in every other log. It links events across systems, for example tying a break-in in an auth log to a beacon in a firewall log.

Where the book teaches it

Related terms

timeline