Platform Security

Policy Engine

Events

Failed Logins

Sessions

Audit Log

Policies

active

Failed Logins

148

last 24h

Sessions

active

Audit Events

8,412

recorded

Policy	Scope	Mode	Status
MFA required	all users	enforce	Active
Password age 90d	all users	enforce	Active
Session idle 30m	all users	enforce	Active
API key rotation 90d	service accounts	monitor	Active
Legacy VPN allow	vpn-gw legacy	monitor	Draft

Time	Event	User	Severity
12:04:11	Password change	arodriguez	Info
12:02:47	New SSH key added	tb	Warn
11:59:03	Admin role granted	sg	High
11:41:22	Session revoked	arodriguez	Info
No matching records

Time	User	Source IP	Result
12:04:11	root	203.0.113.45	Blocked
11:59:03	admin	198.51.100.34	Blocked
11:41:22	arodriguez	10.0.1.5	MFA required
11:12:55	oracle	192.0.2.22	Blocked
No matching records

User	Device	IP	Started
arodriguez	Chrome · macOS	10.0.1.5	09:14
tb	Firefox · Linux	10.0.1.66	08:02
sg	Safari · iPhone	10.0.2.9	07:31

Time	Actor	Action	Target	Result
12:03:20	arodriguez	policy.update	password-age	Allowed
12:01:47	tb	user.create	svc-backup	Allowed
11:58:12	sg	role.grant	admin	Denied
11:40:33	system	session.revoke	arodriguez	Allowed
No matching records

Ransomware behavior blocked on mail-01 CRITICAL

Playbook PB-041 auto-contained host · Ryuk TTPs matched

SSH brute force from 203.0.113.42 HIGH

42 failed logins in 60s · source IP blocked

Threat hunt matched T1059.001 on www-02

PowerShell obfuscation · confidence 0.91

14m

SCA scan completed on 128 hosts

98.2% compliance · 11 benchmarks passed

23m

Firewall rule 'BLK-3321' propagated to 14 nodes

0.4s propagation · geo-blocked 12 CIDRs

31m

Sandbox verdict — 'invoice_9921.exe' malicious

Heuristic score 96 · family 'Emotet'

44m