Security & Compliance

Audit Intelligence

Behavioral-baseline anomaly detection over the audit log: a first-time action type, an unusual hour, or a new IP for an admin's own history. Distinct from Threat Protection's Anomalies, which watches login/session signals.

Open

High score (open)

Resolved (7d)

Anomalies

Scored by a background sweep, newest first.

No open anomalies.

Detection settings

Tune sensitivity for this tenant.

Chain integrity

Walk the tenant's hash-chained audit log and confirm no row has been tampered with.