Audit Trails

Audit trails are available for alerts and cases in the Unit21 system.

Audit trails report all changes that occur including:

• the event that occurred or the action taken - tag added, case opened...
• the agent responsible if applicable
• the date and time of the event

Alert Audit Trail

Audit Trail for alerts include:

• Alert creation
• Alert status (open/close)
• Alert changes (tags, queues, assignments, attachments/media, collaborations, actions/workflows)

📘

Disposition notes are part of the "Notes" tab with an indicator of the disposition taken

Note changes and Investigation checklist changes are not reported.

Case Audit Trail

Audit Trail for cases include:

• Case creation
• Case status (open/close)
• Case changes (tags, assignments, attachments/media, collaborations, actions/workflows)
• Reports created

Similarly for cases historical disposition notes are located in the "Notes" tab when a disposition had notes given when applied.

Note changes and Investigation checklist changes are not reported. Watchers are not reported.