# SEC 4. How do you detect and investigate security events?
<a name="sec-04"></a>

Capture and analyze events from logs and metrics to gain visibility. Take action on security events and potential threats to help secure your workload.

**Topics**
+ [SEC04-BP01 Configure service and application logging](sec_detect_investigate_events_app_service_logging.md)
+ [SEC04-BP02 Capture logs, findings, and metrics in standardized locations](sec_detect_investigate_events_logs.md)
+ [SEC04-BP03 Correlate and enrich security alerts](sec_detect_investigate_events_security_alerts.md)
+ [SEC04-BP04 Initiate remediation for non-compliant resources](sec_detect_investigate_events_noncompliant_resources.md)