2,339 definitions
Incident Response Forensic Snapshot is a security investigation artifact that captures system state for later review for security event handling. It uses logs, configuration, hashes, and time-bounded data so teams can analyze incidents without changing evidence while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Incident Response Forensic Snapshot when an alert escalated to response, so the team could analyze incidents without changing evidence before the risk review began.”
Latency Health Probe is a networking availability check that tests whether a service or path can receive traffic for time between request and response. It uses timed requests, thresholds, and regional checks so teams can send traffic only to healthy targets while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used Latency Health Probe when a user saw slow responses, so the team could send traffic only to healthy targets before traffic crossed a service boundary.”
Zero Trust Evidence Chain is a security audit record that preserves how security evidence was collected and handled for continuous verification model. It uses timestamps, hashes, owners, and storage controls so teams can support trustworthy investigation while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Zero Trust Evidence Chain when a device changed posture, so the team could support trustworthy investigation before the risk review began.”
Service Mesh Route Leak Guard is a networking routing control that detects and blocks accidental route propagation for east-west service communication. It uses prefix filters, validation, and peer policy so teams can protect reachability while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used Service Mesh Route Leak Guard when a service called another service, so the team could protect reachability before traffic crossed a service boundary.”
Incident Response Phishing Resistance is a security identity control that reduces success of credential theft attacks for security event handling. It uses passkeys, hardware-backed factors, and origin checks so teams can protect sign-in flows while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Incident Response Phishing Resistance when an alert escalated to response, so the team could protect sign-in flows before the risk review began.”
Packet Ingress Rule is a networking boundary rule that controls how external traffic enters a service for unit of network transmission. It uses hostnames, paths, protocols, and policy checks so teams can keep entry points predictable while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used Packet Ingress Rule when packet loss increased, so the team could keep entry points predictable before traffic crossed a service boundary.”
Service Mesh Path Trace is a networking diagnostic record that shows where traffic travels and where delay or loss appears for east-west service communication. It uses hop data, timing, and network metadata so teams can debug connectivity issues while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used Service Mesh Path Trace when a service called another service, so the team could debug connectivity issues before traffic crossed a service boundary.”
Endpoint Secret Scanner is a security preventive control that finds credentials before they spread for user device and server protection. It uses pattern matching, entropy checks, and allowlists so teams can stop accidental key exposure while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Endpoint Secret Scanner when a workstation reported suspicious activity, so the team could stop accidental key exposure before the risk review began.”
Access Detection Rule is a security security analytic that matches suspicious behavior or known indicators for authorization and privilege control. It uses logs, thresholds, signatures, and behavioral context so teams can surface actionable alerts while keeping evidence, reliability, and public-safe operational boundaries clear.
“The security team used Access Detection Rule when a role gained new permissions, so the team could surface actionable alerts before the risk review began.”
Service Mesh Traffic Shaper is a networking control mechanism that limits or prioritizes flows across links for east-west service communication. It uses queues, rate limits, and quality-of-service rules so teams can protect important traffic while keeping evidence, reliability, and public-safe operational boundaries clear.
“The network engineering team used Service Mesh Traffic Shaper when a service called another service, so the team could protect important traffic before traffic crossed a service boundary.”