Suspicious activity alerts

Heuristics over recent audit rows (failed logins, API key volume, bulk user updates). Not a replacement for SIEM.

Loading…

Filters

Timeline