Automox Audit Trails for Compliance and to See Who’s Doing What, Where

Episode 06   Published June 25, 2024 13 minute watch

Summary

Audit Trail records who did what, when, and where inside the Automox platform, capturing worklet creation, worklet edits, policy additions, and authentication attempts as events. The demand came from two places: compliance teams that need to prove to auditors they track configuration changes, and security teams watching for activity like repeated failed authentication attempts. The first release is API-first and exports events in the Open Cybersecurity Schema Framework so you can pull them into a SIEM, with a console view to search, filter, and group events planned next. Brandon Shopp, VP of Product, and David Riott, Senior Engineer, discuss the feature with host Steph Rizzuto.