We can apply some of the features included with Pi‑hole
to the NIST Cybersecurity Framework.
For a network tool that continuously monitors,
like Pi‑hole,
it would fall under the Detect function and the
Security Continuous Monitoring category.
Though it's not the primary function of Pi‑hole,
it can be used to detect unauthorized devices,
connections, and software being used on your network.
You can also see if there are connections to malicious domains,
which could be indicative of a cybersecurity event.