# Sources méthodologiques

- ANSSI — Architecture d’un système de journalisation: https://messervices.cyber.gouv.fr/guides/recommandations-de-securite-pour-larchitecture-dun-systeme-de-journalisation
- ANSSI — EBIOS Risk Manager: https://messervices.cyber.gouv.fr/guides/la-methode-ebios-risk-manager-le-guide
- CNIL — Tracer les opérations: https://www.cnil.fr/fr/securite-tracer-les-operations
- MITRE ATT&CK Enterprise: https://attack.mitre.org/matrices/enterprise/
- MITRE ATT&CK Mobile: https://attack.mitre.org/matrices/mobile/
- NIST SP 800-61 Rev. 3: https://csrc.nist.gov/pubs/sp/800/61/r3/final
- Sigma Rules Specification: https://sigmahq.io/sigma-specification/specification/sigma-rules-specification.html
- Microsoft Defender XDR Advanced Hunting: https://learn.microsoft.com/en-us/defender-xdr/advanced-hunting-overview
- Wazuh Architecture: https://documentation.wazuh.com/current/getting-started/architecture.html
- Suricata Rules Format: https://docs.suricata.io/en/latest/rules/intro.html
