System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2122
Last 24 hours
106
User actions
55857
Security actions
29394
Approvals & decisions
25272
Config changes
5582
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-22 05:42:27 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 05:42:26 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-22 05:42:26 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 05:42:25 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 05:42:24 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-22 05:42:24 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 05:42:22 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-22 05:30:02 | worker | - | automation.High Risk Device SOC Alert | automation | 1003 | Matched | {'rule': 'High Risk Device SOC Alert', 'trigger': 'incident', 'matched_conditions':... |
| 2026-10-22 05:30:00 | worker | - | automation.Lateral Movement Investigation | automation | 1003 | Dry_run | {'rule': 'Lateral Movement Investigation', 'trigger': 'incident',... |
| 2026-10-22 05:21:08 | worker | - | automation.Ransomware Impact Response | automation | 1002 | Matched | {'rule': 'Ransomware Impact Response', 'trigger': 'incident', 'matched_conditions':... |
| 2026-10-22 05:18:20 | worker | - | automation.High Risk Device SOC Alert | automation | 1001 | Matched | {'rule': 'High Risk Device SOC Alert', 'trigger': 'incident', 'matched_conditions':... |
| 2026-10-22 05:06:24 | worker | - | automation.Persistence & Defense Evasion Response | automation | 1001 | Matched | {'rule': 'Persistence & Defense Evasion Response', 'trigger': 'incident',... |
| 2026-10-22 04:39:20 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 04:39:18 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 04:33:56 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 04:31:39 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 04:31:36 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-22 04:31:35 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 04:29:20 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-22 04:29:19 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 04:29:17 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 04:26:01 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-22 04:20:31 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 04:20:30 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-22 04:19:25 | worker | - | automation.High Risk Device SOC Alert | automation | 1003 | Matched | {'rule': 'High Risk Device SOC Alert', 'trigger': 'incident', 'matched_conditions':... |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-22 18:35:48 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:35:47 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:35:46 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:35:43 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:35:42 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:34:57 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:34:20 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:34:18 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:34:17 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:34:15 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:31:41 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 18:31:20 | worker (-) | network.scan_all | device | Success |
| 2026-10-22 18:28:57 | worker (-) | approval.request.isolate_device | approval | Pending |
| 2026-10-22 18:28:57 | worker (-) | approval.request.block_indicator | approval | Pending |
| 2026-10-22 18:28:57 | worker (-) | approval.request.collect_investigation_package | approval | Pending |
