Audit Record Review, Analysis, and Reporting

Description

a. Review and analyze system audit records [organization-defined parameter] for indications of [organization-defined parameter] and the potential impact of the inappropriate or unusual activity; b. Report findings to [organization-defined parameter] ; and c. Adjust the level of audit record review, analysis, and reporting within the system when there is a change in risk based on law enforcement information, intelligence information, or other credible sources of information.

Mapped SPARTA techniques

68 techniques

DE-0002 Disrupt or Deceive DownlinkST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0002.01 Inhibit Ground System FunctionalityST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0003.02 Rejected Command CounterST0006
addresses
moderate
AU-6 mitigates DE-0003.02 by reviewing rejection patterns to surface suppression.
DE-0004 MasqueradingST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0009.05 Corruption or Overload of Ground-Based SDA SystemsST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0011 Credentialed EvasionST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0006 Modify Communications ConfigurationST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0006.01 Software Defined RadioST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0006.02 TransponderST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0007 Compromised Ground SystemST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0008 Compromised Developer SiteST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0009 Compromised Partner SiteST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0002 Compromise Software Defined RadioST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0004 Secondary/Backup Communication ChannelST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0004.01 Ground StationST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0006 Compromise Hosted PayloadST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007 Compromise Ground SystemST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007.01 Compromise On-Orbit UpdateST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007.02 Malicious Commanding via Valid GSST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009 Trusted RelationshipST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009.01 Mission Collaborator (academia, international, etc.)ST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009.02 VendorST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009.03 User SegmentST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0012 Assembly, Test, and Launch Operation CompromiseST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0013 Compromise Host SpacecraftST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0001 Hosted PayloadST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0007 Credentialed TraversalST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0003 Ground System PresenceST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0005 Credentialed PersistenceST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0002 Compromise InfrastructureST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0002.01 Mission-Operated Ground SystemST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0002.02 3rd Party Ground SystemST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0003 Obtain Cyber CapabilitiesST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0003.02 Cryptographic KeysST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0004 Stage CapabilitiesST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0004.01 Identify/Select Delivery MechanismST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0004.02 Upload Exploit/PayloadST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001 Gather Spacecraft Design InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.01 Software DesignST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.02 FirmwareST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.03 Cryptographic AlgorithmsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.04 Data BusST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.05 Thermal Control SystemST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.06 Maneuver & ControlST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.07 PayloadST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.08 PowerST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.09 Fault ManagementST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002 Gather Spacecraft DescriptorsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002.01 IdentifiersST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002.02 OrganizationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002.03 OperationsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003 Gather Spacecraft Communications InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.01 Communications EquipmentST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.02 Commanding DetailsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.03 Mission-Specific Channel ScanningST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.04 Valid CredentialsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0004 Gather Launch InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0004.01 Flight TerminationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0006 Gather FSW Development InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0006.01 Development EnvironmentST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0006.02 Security Testing ToolsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0007 Monitor for Safe-Mode IndicatorsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008 Gather Supply Chain InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.01 Hardware ReconST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.02 Software ReconST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.03 Known VulnerabilitiesST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.04 Business RelationshipsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0009 Gather Mission InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.

Cross-framework references

Relationships published by the source frameworks themselves, reproduced here with attribution. They are not SafeMode Space mappings and carry no confidence rating of ours.

Referenced by 3 in NIST Cybersecurity Framework 2.0

Cite as SafeMode Space, nist-80053-rev5 AU-6.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.

# Description

›Mapped SPARTA techniques

68 techniques

›Cross-framework references

Referenced by 3 in NIST Cybersecurity Framework 2.0

Description

Mapped SPARTA techniques

Cross-framework references