GravityLog

Tools

Gravity Scanner Live policy, gap analyzer, dependency map 18 views Baseline Generator Generate a starting audit policy, no upload needed Cloud Logging Mapper Azure and AWS logs mapped to controls New

Overview

Home About this project and why it exists

Reference

Windows Event Log Reference 99 events across 5 log sources NIST SP 800-53 Mapping 34 controls to event-code evidence MITRE ATT&CK Coverage 30 techniques, tactic gap analysis MITRE ATLAS Coverage AI/ML threat map, 6 techniques + honest gaps CIS Controls Coverage Controls 5 & 8, 6 safeguards + honest gaps PCI DSS Requirement 10 Log & monitor access, 7 sub-reqs + honest gaps DISA STIG Coverage Windows Server 2022 V2R9, 4 rules + honest gaps HIPAA Security Rule Technical Safeguards, 5 controls + honest gaps SOC 2 Common Criteria CC1–CC9, 10 controls + honest gaps NIST CSF 2.0 Detect & Protect, 9 controls + honest gaps Detection Catalog Beta Standards-first detections, 6 entries + multi-framework mapping Cyber Kill Chain 7-stage lens on existing ATT&CK coverage D3FEND Coverage Defensive-technique lens, 19 D3FEND techniques Linux Audit Events Beta auditd & PAM — 19 events, growing

Blog

Blog Notes on logging, cost, and detection tradeoffs

Legal

Privacy What's saved locally and what's never transmitted

Blog

Notes on log management, cost, and detection

Short, practical write-ups on the tradeoffs behind everything else on this site.

More posts as they're written.

Opinions here are GravityLog's own, built from the same reasoning behind the tools on this site. Not a substitute for advice specific to your environment.