Audit log events

Users with the administrator role can view recent events by opening the administration menu and selecting Audit Events.

For each event, the timestamp and the actor are recorded. Where possible, the details for each event include a link. For example, a link to the assessment started or a button to view the log for an assessment that was paused.

Display label	Event name
Access Denied	`authorization.denied`
Add Attack Credits	`organization.add-attack-credits`
API Key Created	`api-key.created`
API Key Revoked	`api-key.revoked`
Assessment Approved Hours Updated	`assessment.approved-hours-updated`
Assessment Auto-Paused	`assessment.auto-paused`
Assessment Cancelled	`assessment.cancelled`
Assessment Paused	`assessment.paused`
Assessment Request	`lightspeed.assessment-requested`
Assessment Resumed	`assessment.resumed`
Assessment Started	`assessment.start`
Asset Created	`asset.created`
Asset Deleted	`asset.deleted`
Auto-Pause Review Request	`assessment.auto-pause-review-requested`
Bulk Export Request	`bulk-export.requested`
Credential Created	`credential.created`
Credential Deleted	`credential.deleted`
Credential Restored	`credential.restored`
Credential Updated	`credential.updated`
Domain Added	`organization.domain-added`
Domain Removed	`organization.domain-removed`
IP Allow List Change	`organization.allowlist-updated`
Member Invited	`organization.invite-member`
Member Removed	`organization.remove-member`
Member Role Change	`organization.update-member`
Preflight Start	`preflight.started`
Quote Requested	`lightspeed.quote-requested`
Report Deletion	`report.deleted`
Report Document Downloaded	`report.document-downloaded`
Report Generation	`report.generated`
Report Release	`report.released`
Resource Asset Link	`resource.asset-linked`
Resource Deletion	`resource.deleted`
Resource Downloaded	`resource.downloaded`
Resource Rename	`resource.renamed`
Resource Upload	`resource.created`
Resource Version Upload	`resource.version-uploaded`
SCIM Default Role Change	`scim.default-role-changed`
SCIM Group Creation	`scim.group-created`
SCIM Group Deletion	`scim.group-deleted`
SCIM Group Role Mapping Change	`scim.group-mappings-changed`
SCIM Group Update	`scim.group-updated`
SCIM Token Creation	`scim-token.created`
SCIM Token Revocation	`scim-token.revoked`
SCIM User Deprovisioning	`scim.user-deprovisioned`
SCIM User Provisioning	`scim.user-provisioned`
SCIM User Role Change	`scim.user-role-changed`
SCIM User Update	`scim.user-updated`
Session Revocation	`session.revoked`
Set Attack Credits	`organization.set-attack-credits`
SSO Configured	`sso.configured`
SSO Deleted	`sso.deleted`
User Login	`user.logged-in`
User Logout	`user.logged-out`
Verify Fix	`assessment.verify-fix`
Webhook Subscription Change	`webhook-subscription.updated`
Webhook Subscription Creation	`webhook-subscription.created`
Webhook Subscription Deletion	`webhook-subscription.deleted`