Audit Trail
Records that capture who performed which actions and when, providing the accountability that lets defenders trace events back to a responsible identity. They are foundational to investigation and to proving what happened.
Concept Neighborhood
Start here
Accountability
The foundation Audit Trail builds on, worth understanding first.
AccountabilityStart here
The ability to connect actions to a specific identity or responsible party.
3
lessons
Evidence Retention
Keeping compliance evidence for the required length of time, set by frameworks, regulations, or audit needs, so it remains available to demonstrate that controls operated over the relevant period, then disposing of it appropriately.
3
lessons
Non-Repudiation
11
lessons
Continuous Evidence Collection
9
lessons
Session Recording
7
lessons
Privileged Session Monitoring
5
lessons
Session Recording Architecture
5
lessons
Authentication
4
lessons
Show 15 more connections
Compliance Evidence
4
lessons
Authorization
3
lessons
Authorization Policies
3
lessons
Configuration Evidence
3
lessons
Audit Cycle
1
lesson
Audit Execution
1
lesson
Audit Findings
1
lesson
Audit Log Analysis
1
lesson
Audit Preparation
1
lesson
Auditor Engagement
1
lesson
Auditor Selection
1
lesson
Case
1
lesson
Case Management System
1
lesson
Sudo
1
lesson
Tuning Documentation
1
lesson
Related Lessons
3 lessons cover this conceptEvidence Collection in Cloud Environments
Cloud Security Engineer
Authentication, Authorization, and Accountability
General Beginner
Documentation and Case Management
SOC Analyst
Sign in to open lesson content directly.