NIST SP 800-207
NIST SP 800-207: Asset Management

NIST SP 800-207 207-SUP-SIEM: Security Information and Event Management (SIEM) System

Collects security-centric information for analysis to refine policies and warn of possible active attacks against enterprise assets.

Other controls in NIST SP 800-207: Asset Management

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.