Collecting authorization events, creating a baseline user profile, and determining whether authorization events are consistent with the baseline profile.
https://d3fend.mitre.org/technique/d3f:AuthorizationEventThresholding/
| ID | Name | Description | NIST Rev5 | D3FEND | ISO 27001 | |
| ID | Name | Description | |
|---|---|---|---|
| ID | Description | |
| Requirement | Rationale/Additional Guidance/Notes |
|---|