System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2301
Last 24 hours
105
User actions
54488
Security actions
28620
Approvals & decisions
24609
Config changes
5438
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-21 05:01:00 | worker | - | automation.Lateral Movement Investigation | automation | 1003 | Dry_run | {'rule': 'Lateral Movement Investigation', 'trigger': 'incident',... |
| 2026-10-21 04:53:22 | worker | - | automation.Ransomware Impact Response | automation | 1002 | Matched | {'rule': 'Ransomware Impact Response', 'trigger': 'incident', 'matched_conditions':... |
| 2026-10-21 04:52:17 | worker | - | automation.High Risk Device SOC Alert | automation | 1001 | Matched | {'rule': 'High Risk Device SOC Alert', 'trigger': 'incident', 'matched_conditions':... |
| 2026-10-21 04:46:55 | worker | - | automation.Persistence & Defense Evasion Response | automation | 1001 | Matched | {'rule': 'Persistence & Defense Evasion Response', 'trigger': 'incident',... |
| 2026-10-21 04:21:58 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-21 04:21:57 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-21 04:19:47 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-21 04:19:47 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-21 04:18:42 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-21 04:18:41 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-21 04:18:41 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-21 04:17:36 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-21 04:17:35 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-21 04:17:35 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-21 04:12:13 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-21 04:08:59 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-21 04:07:55 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-21 04:03:37 | worker | - | automation.High Risk Device SOC Alert | automation | 1003 | Matched | {'rule': 'High Risk Device SOC Alert', 'trigger': 'incident', 'matched_conditions':... |
| 2026-10-21 04:00:24 | worker | - | automation.Lateral Movement Investigation | automation | 1003 | Dry_run | {'rule': 'Lateral Movement Investigation', 'trigger': 'incident',... |
| 2026-10-21 03:52:47 | worker | - | automation.Ransomware Impact Response | automation | 1002 | Matched | {'rule': 'Ransomware Impact Response', 'trigger': 'incident', 'matched_conditions':... |
| 2026-10-21 03:51:41 | worker | - | automation.High Risk Device SOC Alert | automation | 1001 | Matched | {'rule': 'High Risk Device SOC Alert', 'trigger': 'incident', 'matched_conditions':... |
| 2026-10-21 03:46:20 | worker | - | automation.Persistence & Defense Evasion Response | automation | 1001 | Matched | {'rule': 'Persistence & Defense Evasion Response', 'trigger': 'incident',... |
| 2026-10-21 03:21:33 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-21 03:21:33 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-21 03:19:23 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
1 / 985
Next →
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-21 05:01:35 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 05:01:00 | worker (-) | automation.Lateral Movement Investigation | automation | Dry_run |
| 2026-10-21 05:00:06 | admin (administrator) | report.generated.executive | reporting | Success |
| 2026-10-21 04:59:41 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:59:39 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:59:37 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:59:34 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:59:32 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:58:41 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:58:22 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:58:19 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:58:18 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:58:18 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:56:35 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 04:54:01 | worker (-) | vanta.sync | compliance | Success |
