Glossary: Security Operations and Incident Response

Retention

Keeping logs long enough to look back, because many attacks are found weeks after they begin.