System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2110
Last 24 hours
106
User actions
55699
Security actions
29322
Approvals & decisions
25215
Config changes
5567
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-22 08:08:03 | worker | - | automation.Persistence & Defense Evasion Response | automation | 1001 | Matched | {'rule': 'Persistence & Defense Evasion Response', 'trigger': 'incident',... |
| 2026-10-22 07:43:43 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 07:43:43 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 07:43:42 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 07:43:41 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 07:43:40 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 07:43:40 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-22 07:43:40 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 07:43:39 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-22 07:43:39 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 07:43:38 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 07:43:38 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-22 07:43:38 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 07:43:37 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-22 07:31:47 | worker | - | automation.High Risk Device SOC Alert | automation | 1003 | Matched | {'rule': 'High Risk Device SOC Alert', 'trigger': 'incident', 'matched_conditions':... |
| 2026-10-22 07:31:47 | worker | - | automation.Lateral Movement Investigation | automation | 1003 | Dry_run | {'rule': 'Lateral Movement Investigation', 'trigger': 'incident',... |
| 2026-10-22 07:21:54 | worker | - | automation.Ransomware Impact Response | automation | 1002 | Matched | {'rule': 'Ransomware Impact Response', 'trigger': 'incident', 'matched_conditions':... |
| 2026-10-22 07:19:45 | worker | - | automation.High Risk Device SOC Alert | automation | 1001 | Matched | {'rule': 'High Risk Device SOC Alert', 'trigger': 'incident', 'matched_conditions':... |
| 2026-10-22 07:07:55 | worker | - | automation.Persistence & Defense Evasion Response | automation | 1001 | Matched | {'rule': 'Persistence & Defense Evasion Response', 'trigger': 'incident',... |
| 2026-10-22 06:43:08 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 06:43:07 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 06:43:07 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 06:43:06 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 06:43:06 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 06:43:05 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-22 14:48:07 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 14:48:06 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 14:48:05 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 14:48:05 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 14:48:04 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 14:48:04 | worker (-) | approval.request.create_remediation_task | approval | Pending |
| 2026-10-22 14:48:04 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-22 14:48:04 | worker (-) | approval.request.create_ticket | approval | Pending |
| 2026-10-22 14:48:04 | worker (-) | automation.Critical Vulnerability Remediation | automation | Matched |
| 2026-10-22 14:48:03 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 14:48:03 | worker (-) | approval.request.create_remediation_task | approval | Pending |
| 2026-10-22 14:48:03 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-22 14:48:03 | worker (-) | approval.request.create_ticket | approval | Pending |
| 2026-10-22 14:48:03 | worker (-) | automation.Critical Vulnerability Remediation | automation | Matched |
| 2026-10-22 14:48:02 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
