Carbon 9 Compliance M-26-14

The Carbon 9 Defense - Compliance App extends federal logging compliance coverage for OMB Memorandum M-26-14, which governs effective and efficient agency logging and network visibility to defend against evolving cyber threats. The app provides compliance dashboards, maturity model assessments, and Threat Hunting and Incident Response Framework (THIRF) objective tracking aligned to M-26-14 requirements. It operates as a soft companion to Compliance Essentials for Splunk, sharing compatible data structures but requiring no hard dependency. The app uses three KV store collections to track systems inventory, manual attestation scores, and configuration parameters, alongside two CSV lookups that map systems to expected sourcetypes and event hosts to system identifiers. Four saved searches compute Inventory Visibility, Collection Coverage, Asset Snapshots, and merged Maturity Scores, enabling automated tracking of compliance posture over time. The app is intended for Compliance Officers managing federal logging posture, SOC Analysts tracking event log coverage and retention, and Federal IT administrators implementing M-26-14 controls.