466387bf_Policy_considerations_aracterization_Data_to_Collect_Data_Category
[Types of Data to Collect] User executing the process Process startup time, arguments, filenames Process exit status, time, duration, resources consumed Means by which each process is normally initiated (administrator, other users, other programs or processes), with what authorization and privileges Devices used by specific processes Files currently open by specific processes [Data Category] 
Other process data
N e t w o r k p e r f o r m a n c e
S y s t e m p e r f o r m a n c e
O t h e r s y s t e m d a t a
P r o c e s s p e r f o r m a n c e
O t h e r p r o c e s s d a t a
F i l e s a n d d i r e c t o r i e s
U s e r s
A p p l i c a t i o n s
L o g f i l e s
V u l n e r a b i l i t i e s
Policy considerations
Data Category