dd-audit-security-investigation

What problem does it solve?

This Skill provides efficient tools for analyzing security events logged in Audit Trail, simplifying investigations of deletions, configuration changes, login activities, and permission modifications.

Core Features & Use Cases

• Audit Trail Querying: Access detailed logs of actions like deletions, modifications, and logins.
• User and Resource Tracking: Identify who made changes and to which resources.
• Geographical and Anomaly Detection: Pinpoint unusual activities by location and timing.
• Use Case: Quickly respond to a security alert by querying specific users, resource types, or timeframes for evidence.

Quick Start

Query security events in the Audit Trail related to the deletion of specific resources within the last week.