Glossary: Logs and Data Sources for Investigations

WORM (write once, read many)

Also written: WORM storage, write-once storage, immutable storage

Storage where logs can't be changed or deleted for a set time, so they stay trustworthy evidence.