Audit Record Generation

Description

a. Provide audit record generation capability for the event types the system is capable of auditing as defined in [AU-2a](#au-2_smt.a) on [organization-defined parameter]; b. Allow [organization-defined parameter] to select the event types that are to be logged by specific components of the system; and c. Generate audit records for the event types defined in [AU-2c](#au-2_smt.c) that include the audit record content defined in [AU-3](#au-3).

Mapped SPARTA techniques

80 techniques

DE-0002 Disrupt or Deceive DownlinkST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0002.01 Inhibit Ground System FunctionalityST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0002.03 Inhibit Spacecraft FunctionalityST0006
addresses
moderate
AU-12 addresses audit-record generation on telemetry-mode changes whose review surfaces source-side suppression.
DE-0003 On-Board Values ObfuscationST0006
addresses
moderate
AU-12 addresses audit-record generation whose review surfaces obfuscation of housekeeping values.
DE-0003.02 Rejected Command CounterST0006
addresses
moderate
AU-12 addresses audit-record generation whose review surfaces tampered rejection counts.
DE-0003.03 Command Receiver On/Off ModeST0006
addresses
moderate
AU-12 addresses audit-record generation on receiver-mode changes whose review surfaces deliberate quiet windows.
DE-0003.06 Telemetry Downlink ModesST0006
addresses
moderate
AU-12 addresses audit-record generation on telemetry-mode changes whose review surfaces evasive reconfiguration.
DE-0003.08 Received CommandsST0006
addresses
moderate
AU-12 addresses audit-record generation on accepted/rejected/executed command histories.
DE-0004 MasqueradingST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0009.05 Corruption or Overload of Ground-Based SDA SystemsST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0011 Credentialed EvasionST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0003 Modify Authentication ProcessST0004
addresses
moderate
AU-12 addresses logging governance whose enforcement makes auth-handler changes visible.
EX-0005.02 Malicious Use of Hardware CommandsST0004
addresses
moderate
AU-12 addresses audit-record generation on hardware-level commanding whose review surfaces EX-0005.02.
EX-0012 Modify On-Board ValuesST0004
addresses
moderate
AU-12 addresses audit-record generation on on-board-value modifications whose review surfaces tampering.
EX-0012.06 Science/Payload DataST0004
addresses
moderate
AU-12 addresses logging governance whose enforcement makes payload-data tampering visible.
EXF-0006 Modify Communications ConfigurationST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0006.01 Software Defined RadioST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0006.02 TransponderST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0007 Compromised Ground SystemST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0008 Compromised Developer SiteST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0009 Compromised Partner SiteST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0002 Compromise Software Defined RadioST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0004 Secondary/Backup Communication ChannelST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0004.01 Ground StationST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0006 Compromise Hosted PayloadST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007 Compromise Ground SystemST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007.01 Compromise On-Orbit UpdateST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007.02 Malicious Commanding via Valid GSST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009 Trusted RelationshipST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009.01 Mission Collaborator (academia, international, etc.)ST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009.02 VendorST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009.03 User SegmentST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0012 Assembly, Test, and Launch Operation CompromiseST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0013 Compromise Host SpacecraftST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IMP-0001 Deception (or Misdirection)ST0009
addresses
moderate
AU-12 addresses audit-record generation whose review reveals deception-driven inconsistency.
IMP-0006 TheftST0009
addresses
moderate
AU-12 addresses audit-record generation on data access whose review surfaces theft attempts.
LM-0001 Hosted PayloadST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0007 Credentialed TraversalST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0003 Ground System PresenceST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0004 Replace Cryptographic KeysST0005
addresses
moderate
AU-12 addresses audit-record generation on key-management events whose review surfaces adversary rekey attempts.
PER-0005 Credentialed PersistenceST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0002 Compromise InfrastructureST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0002.01 Mission-Operated Ground SystemST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0002.02 3rd Party Ground SystemST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0003 Obtain Cyber CapabilitiesST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0003.02 Cryptographic KeysST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0004 Stage CapabilitiesST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0004.01 Identify/Select Delivery MechanismST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0004.02 Upload Exploit/PayloadST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001 Gather Spacecraft Design InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.01 Software DesignST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.02 FirmwareST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.03 Cryptographic AlgorithmsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.04 Data BusST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.05 Thermal Control SystemST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.06 Maneuver & ControlST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.07 PayloadST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.08 PowerST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.09 Fault ManagementST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002 Gather Spacecraft DescriptorsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002.01 IdentifiersST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002.02 OrganizationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002.03 OperationsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003 Gather Spacecraft Communications InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.01 Communications EquipmentST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.02 Commanding DetailsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.03 Mission-Specific Channel ScanningST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.04 Valid CredentialsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0004 Gather Launch InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0004.01 Flight TerminationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0006 Gather FSW Development InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0006.01 Development EnvironmentST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0006.02 Security Testing ToolsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0007 Monitor for Safe-Mode IndicatorsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008 Gather Supply Chain InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.01 Hardware ReconST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.02 Software ReconST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.03 Known VulnerabilitiesST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.04 Business RelationshipsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0009 Gather Mission InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.

Cite as SafeMode Space, nist-80053-rev5 AU-12.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.

# Description

›Mapped SPARTA techniques

80 techniques

Description

Mapped SPARTA techniques