System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2299
Last 24 hours
105
User actions
54490
Security actions
28620
Approvals & decisions
24610
Config changes
5439
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-21 04:53:22 | worker | - | approval.request.isolate_device | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-09AA60A4BC', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 04:53:22 | worker | - | approval.request.block_indicator | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-4ECAC0EB98', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 04:53:22 | worker | - | approval.request.collect_investigation_package | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-9675A45819', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 04:53:22 | worker | - | approval.request.notify_soc | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-1C04C17757', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 04:46:55 | worker | - | approval.request.block_indicator | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-C6CA1B7D59', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 04:46:55 | worker | - | approval.request.notify_soc | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-767070D05F', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 04:46:55 | worker | - | approval.request.run_hunting_queries | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-5F1D6751DF', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 04:46:55 | worker | - | approval.request.collect_investigation_package | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-448F9248EA', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 04:46:55 | worker | - | approval.request.investigate | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-0C01D6E511', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 04:18:42 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-0925E4B22A', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 04:18:42 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-EE24FADD77', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 04:18:41 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-E918E87723', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 04:17:36 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-1064D2BF24', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 04:17:36 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-17FEE88A88', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 04:17:36 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-8696313C73', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 04:12:13 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-F60B0C3C43', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 04:12:13 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-D4D759B75A', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 04:12:13 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-196DA13828', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 04:07:55 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-BC32A32364', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 04:07:55 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-99FDC2E222', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 04:07:55 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-8C603B59FD', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:52:47 | worker | - | approval.request.isolate_device | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-58A74CE716', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 03:52:47 | worker | - | approval.request.block_indicator | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-DA04DF95BD', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 03:52:47 | worker | - | approval.request.collect_investigation_package | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-63C1150B6E', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 03:52:47 | worker | - | approval.request.notify_soc | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-7A5DDBD9A9', 'policy': 'Ransomware Impact Response', 'action_id':... |
1 / 1145
Next →
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-21 05:04:15 | worker (-) | remediation.update_incident | remediation | Succeeded |
| 2026-10-21 05:04:15 | worker (-) | remediation.notify_teams | remediation | Succeeded |
| 2026-10-21 05:04:15 | worker (-) | automation.High Risk Device SOC Alert | automation | Matched |
| 2026-10-21 05:03:05 | admin (administrator) | report.generated.soc | reporting | Success |
| 2026-10-21 05:01:35 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 05:01:00 | worker (-) | automation.Lateral Movement Investigation | automation | Dry_run |
| 2026-10-21 05:00:06 | admin (administrator) | report.generated.executive | reporting | Success |
| 2026-10-21 04:59:41 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:59:39 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:59:37 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:59:34 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:59:32 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:58:41 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:58:22 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:58:19 | worker (-) | cti.ingest | threat_intelligence | Success |
