Activity and audit history

Read workspace activity

Activity presents permission-aware audit-derived events for important workspace actions. Filter by time, actor, action, result, or resource when available. A display name is contextual; immutable identifiers and correlation data distinguish records reliably.

Export and investigate

Authorized exports support incident response, compliance review, and business evidence. Protect exported records like the source workspace, record why they were created, and avoid using them as a substitute for live authorization state.

1. 1

   Define the investigation scope.

2. 2

   Apply narrow filters.

3. 3

   Inspect related correlation identifiers.

4. 4

   Export only when necessary.

5. 5

   Store and dispose of the export under policy.