WEB Audit и Access

Какво обхваща

• Audit се групира по Administrator actions, Software/Transactions, Services/Workers, Modules, Hardware/Diagnostics, Remote/Managed Servers, Security/Access и System.
• Primary row е compact: time, severity, actor, category, subject и human message; technical details се expand-ват.
• Filters: period, severity, category, actor, server/module, event type, operation/journal/case ID и text.
• Access управлява users, roles, password, enable/disable, delete и session revoke.

Как се работи

1. Filter по object/operation.
2. Expand details при нужда.
3. При compromised session Disable и Revoke.
4. Use least privilege при role change.

Важни правила

• Worker events са visually subdued, но не се губят.
• Disable спира future login; Revoke invalidates active sessions.
• Audit history остава след delete.