To fight against living off the land (LOTL) techniques, the National Security Agency (NSA) has published a best practice guide for event logging. The publication details best practices for event logging and threat detection in cloud services, enterprise networks, mobile devices, and operational technology (OT) networks to ensure continued delivery of critical systems.

Source: Infosecurity