Decision trace
A decision trace records why a decision was made, not only what was done: the evidence considered, the rule or model used and any override by a person. It lets a reviewer reconstruct the reasoning after an automated action. It complements an audit log, which records the action itself.
Definition
A trace is more useful than a log when someone must defend a decision. A log says the host was isolated. A trace says why and on what evidence.
Ask whether traces are stored per action, how long they are kept and whether they can be exported.
Decision trace in D3 Security's documentation
D3 Security says Morpheus keeps an audit trail per incident (vendor claim). The page does not say whether the trail records why a decision was made, and it does not describe export or retention. vendor claim d3security.com, read
The example names a vendor and its own page. A vendor's use of Decision trace may differ from the definition above; the rubric uses the definition on this page.