Audit Log

15 events recorded · 2 failures

2 failed events detected in the log. Review these entries for potential security issues.

TimestampUserActionResourceDetailsIP AddressResult
2026-04-21 14:55:03Rachel OkonkwoRole AssignedCarlos Mendez → NOC Senior OperatorApproved via INC-2040710.10.1.42success
2026-04-21 13:47:28Priya NairAccess Request SubmittedDeveloper – Prod Access (INC-20441)Awaiting IAM review10.10.2.88success
2026-04-21 13:12:09Nate OseiAccess Request SubmittedActive Directory – Group Write (INC-20438)Awaiting Service Desk Lead approval10.10.3.55success
2026-04-21 11:30:00Rachel OkonkwoUser SuspendedMeera Krishnamurthy (EMP-6033)Suspended pending HR and InfoSec review10.10.1.42success
2026-04-21 10:08:47Meera KrishnamurthyApproval Attempt – Insufficient PrivilegeTransaction Exception Queue – WriteAccount suspended; request blocked by policy engine10.10.6.31failed
2026-04-20 17:22:54Ethan PowellAccess Request SubmittedEndpoint Isolation – CrowdStrike (INC-20431)Escalated by SOC Lead Ingrid Larsson10.10.5.14success
2026-04-17 16:05:11Rachel OkonkwoRequest RejectedIssuer Services Manager – James Whitfield (INC-20398)Rejected: role elevation policy not met10.10.1.42success
2026-04-17 15:58:39James WhitfieldUnauthorized Access AttemptClient Configuration PortalAttempted direct access before IAM review completed10.10.6.77failed
2026-04-17 11:44:20Daniel FerreiraRequest ApprovedServiceNow Admin Console – Kevin Hartley (INC-20385)Time-limited access granted for 30 days10.10.1.61success
2026-04-14 09:30:55Tyler BensonPermission GrantedTerraform State – Production WriteApproved via INC-20361; expires 2026-04-2110.10.2.103success
2026-04-21 09:01:14Rachel OkonkwoAccess RevokedTerraform State – Production Write – Tyler BensonScheduled expiry enforced; access window closed10.10.1.42success
2026-04-15 14:19:33Fatima Al-AminRequest RejectedTransaction Exception Queue – Write – Meera Krishnamurthy (INC-20374)Rejected: account under active compliance review10.10.6.05success
2026-04-13 08:52:47Ingrid LarssonRole AssignedEthan Powell → SOC Analyst L2 (temporary elevation)Temporary elevation for threat campaign response; expires 2026-04-2710.10.5.02success
2026-04-20 15:41:07Amara DialloAccess Request SubmittedAWS Production Account – Read-Only (INC-20419)Approved by dev lead; pending IAM provisioning10.10.2.91success
2026-04-14 17:03:22Yusuf Al-RashidBulk Export – Audit LogAudit Logs 2026-04-01 to 2026-04-14Exported for monthly SOC compliance report10.10.5.09success