Neither law hands you a log format. Both say what a log must be able to do once an incident is on the clock. What NIS2 and DORA ask of an audit trail, and how Sapherbox's answers.
