Find this documentation
- Log levels and object structure — audit-event-sequence
- Log levels and object structure — interpret-audit-change
- Verify security event export and retention
- Verify security event export and retention — 1-find-a-known-event-and-record-the-time-correctly
- Verify security event export and retention — 2-check-the-external-feed-separately
- Verify security event export and retention — 4-establish-retention-for-each-copy
- Verify security event export and retention — investigate-an-access-event