Auditing of actions performed on risky users or risky sign-ins

%3CLINGO-SUB%20id%3D%22lingo-sub-1175702%22%20slang%3D%22en-US%22%3EAuditing%20of%20actions%20performed%20on%20risky%20users%20or%20risky%20sign-ins%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1175702%22%20slang%3D%22en-US%22%3E%3CP%3EAre%20actions%20performed%20on%20risky%20users%20and%20risky%20sign-ins%20like%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E-%20Confirm%20user%20compromised%3C%2FP%3E%3CP%3E-%20Dismiss%20user%20risk%3C%2FP%3E%3CP%3E-%20Block%20user%3C%2FP%3E%3CP%3E-%20Confirm%20sign-ins%20compromised%3C%2FP%3E%3CP%3E-%20Confirm%20sign-ins%20safe%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Elogged%20in%20an%20audit%20log%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20would%20like%20to%20understand%20why%20(or%20by%20who)%20the%20risk%20state%20of%20risky%20users%20was%20dismissed%20or%20remediated%20(since%20it%20wasn't%20by%20an%20admin).%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1175702%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIdentity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Contributor

Are actions performed on risky users and risky sign-ins like

 

- Confirm user compromised

- Dismiss user risk

- Block user

- Confirm sign-ins compromised

- Confirm sign-ins safe

 

logged in an audit log?

 

I would like to understand why (or by who) the risk state of risky users was dismissed or remediated (since it wasn't by an admin).

0 Replies