Sign in
Unified audit
Cross-module event history. Click a row for full details; promote applies to app-control observed paths.
Canonical unified audit store with SQL pagination. Covers app control, DNS (block + allow samples), Defender, firewall, containment, policy sync, vulnerability findings, network discovery alerts, and admin actions.
Default: Last 24 hours
Matching: 0
Allowed: 0
Denied: 0
Observed: 0
Learned: 0
App control: 0
DNS block: 0
DNS allow: 0
Defender: 0
App requests: 0
Firewall: 0
Containment: 0
Policy sync: 0
Vulnerability: 0
Network discovery: 0
System: 0
Ingestion health
No endpoint ingestion data yet.
| Endpoint | Status | Last seen | Last telemetry | Last DNS block | Policy |
|---|
Alert rules (webhook)
Click a row to view full event details. Promote checkboxes apply to app-control observed paths only.
No audit events match the current filters.
| Select | Time | Type | Endpoint | Disposition | Subject | Details |
|---|