Verify Privilege Vault Events

The Verify Privilege Vault service monitors events related to Verify Privilege Vault for any activity related to the Verify Privileged Identity Platform. The following levels are audited.

  • Folder was added by {{Actor.Name}}.

  • Folder was deleted by {{Actor.Name}}.

  • Folder permissions were updated by {{Actor.Name}}.

  • Secret {{Target.Name}} policy for folder was updated by {{Actor.Name}}.

  • Secret {{Target.Name}} was deleted by {{Actor.Name}}.

  • Secret {{Target.Name}} was viewed by {{Actor.Name}}.

  • Secret {{Target.Name}} cache was viewed by {{Actor.Name}}.

  • Secret {{Target.Name}} file was saved by {{Actor.Name}}.

  • Secret {{Target.Name}} was updated by {{Actor.Name}}.

  • Secret {{Target.Name}} was expired today for {{Actor.Name}}.

  • Secret {{Target.Name}} will be expired in 1 day.

  • Secret {{Target.Name}} will be expired in 7 days.

  • Secret {{Target.Name}} will be expired in 15 days.

  • Secret {{Target.Name}} will be expired in 3 days.

  • Secret {{Target.Name}} policy was updated by {{Actor.Name}}.

  • Secret {{Target.Name}} password was changed by {{Actor.Name}}.

  • Secret {{Target.Name}} password change was failed.

  • Secret {{Target.Name}} was exported by {{Actor.Name}}.

  • Secret {{Target.Name}} will be expired in 30 days.

  • Secret {{Target.Name}} will be expired in 45 days.

  • Secret {{Target.Name}} will be expired in 60 days.

  • Secret {{Target.Name}} will be expired in 90 days.

  • Session recording was viewed by {{Actor.Name}}.

  • Secret was copied by {{Actor.Name}}.

  • Secret was checked in by {{Actor.Name}}.

  • Secret was checked out by {{Actor.Name}}.

  • Secret access was approved by {{Actor.Name}}.

  • Secret access was denied by {{Actor.Name}}.

  • Unlimited admin was enabled by {{Actor.Name}}.

  • Unlimited admin was disabled by {{Actor.Name}}.

  • Secret export was run by {{Actor.Name}}.

  • Secret import was run by {{Actor.Name}}.

  • Expire all secrets command was run by {{Actor.Name}}.

  • Secret template was created by {{Actor.Name}}.

  • Secret template was edited by {{Actor.Name}}.

  • Secret template was copied by {{Actor.Name}}.

  • Field in a secret template was encrypted by {{Actor.Name}}.

  • Field in a secret template was exposed by {{Actor.Name}}.

  • Owners of a secret template were updated by {{Actor.Name}}.

  • Access permissions for creating a secret template were updated by {{Actor.Name}}.

  • Licenses will be expired in 30 days.

  • Group owners were updated by {{Actor.Name}}.

  • Secret policy was created by {{Actor.Name}}.

  • Secret policy was updated by {{Actor.Name}}.

  • Site was created by {{Actor.Name}}.

  • Site was updated by {{Actor.Name}}.

  • Site was enabled by {{Actor.Name}}.

  • Site was disabled by {{Actor.Name}}.

  • Site engine was added by {{Actor.Name}}.

  • Site engine was removed by {{Actor.Name}}.

  • Site engine was online for {{Actor.Name}}.

  • Site engine was offline for {{Actor.Name}}.

  • Site engine was downloaded by {{Actor.Name}}.

  • Engine was created by {{Actor.Name}}.

  • Engine was activated by {{Actor.Name}}.

  • Engine was deactivated by {{Actor.Name}}.

  • Site connector was created by {{Actor.Name}}.

  • Site connector was edited by {{Actor.Name}}.

  • Site connector was enabled by {{Actor.Name}}.

  • Site connector was disabled by {{Actor.Name}}.

  • Credentials of a site connector were viewed by {{Actor.Name}}.

  • Auto export settings were edited by {{Actor.Name}}.

  • Auto export data was exported by {{Actor.Name}}.

  • Auto export was run by {{Actor.Name}}.

  • Auto export data was downloaded by {{Actor.Name}}.

  • User was created by {{Actor.Name}}.

  • User was disabled by {{Actor.Name}}.

  • User was enabled by {{Actor.Name}}.

  • User was locked out by {{Actor.Name}}.

  • User was added to a group by {{Actor.Name}}.

  • User was removed from a group by {{Actor.Name}}.

  • User was removed from a group by {{Actor.Name}}.

  • Logout was performed by {{Actor.Name}}.

  • Login was failed for {{Actor.Name}}.

  • Password was changed by {{Actor.Name}}.

  • User owners were updated by {{Actor.Name}}.

  • 2 Factor settings were updated by {{Actor.Name}}.

  • A challenge was given to {{Actor.Name}}.

  • Challenge for {{Actor.Name}} was cleared.

  • Role was created by {{Actor.Name}}.

  • A user or group was assigned to a role by {{Actor.Name}}.

  • A user or group was unassigned from a role by {{Actor.Name}}.

  • Role was enabled by {{Actor.Name}}.

  • Role was disabled by {{Actor.Name}}.

  • Role was updated by {{Actor.Name}}.

  • Permissions were added to a role by {{Actor.Name}}.

  • Permissions were removed from the role by {{Actor.Name}}.

  • HSM encryption was enabled by {{Actor.Name}}.

  • HSM encryption was rotated by {{Actor.Name}}.

  • HSM encryption was disabled by {{Actor.Name}}.

  • Secret keys rotation for encryption was run by {{Actor.Name}}.

  • Secret keys rotation for encryption was canceled by {{Actor.Name}}.

  • Secret keys rotation for encryption was completed successfully by {{Actor.Name}}.

  • Secret keys rotation for encryption failed for {{Actor.Name}}.

  • Configuration was updated by {{Actor.Name}}.

  • An IP address range was created by {{Actor.Name}}.

  • An IP address range was updated by {{Actor.Name}}.

  • An IP address range was deleted by {{Actor.Name}}.

  • A user was added to the IP address range by {{Actor.Name}}.

  • A user was removed from the IP address range by {{Actor.Name}}.

  • A group was added to the IP address range by {{Actor.Name}}.

  • A group was removed from the IP address range by {{Actor.Name}}.

  • Secret heartbeat failed for {{Actor.Name}}.

  • Secret heartbeat succeeded for {{Actor.Name}}.

  • Secret hook run failed for {{Actor.Name}}.

  • Secret hook run was completed by {{Actor.Name}}.

  • A secret hook was created by {{Actor.Name}}.

  • A secret hook was updated by {{Actor.Name}}.

  • A secret hook was deleted by {{Actor.Name}}.

  • A custom secret was audited by {{Actor.Name}}.

  • Password of a secret was viewed by {{Actor.Name}}.

  • Secret password was copied to the clipboard by {{Actor.Name}}.

  • A secret dependency was removed by {{Actor.Name}}.

  • A secret dependency was added by {{Actor.Name}}.

  • A Powershell script was created by {{Actor.Name}}.

  • A Powershell script was deactivated by {{Actor.Name}}.

  • A Powershell script was updated by {{Actor.Name}}.

  • A Powershell script was activated by {{Actor.Name}}.

  • A Powershell script was viewed by {{Actor.Name}}.

  • An SSH script was created by {{Actor.Name}}.

  • An SSH script was deactivated by {{Actor.Name}}.

  • An SSH script was updated by {{Actor.Name}}.

  • An SSH script was activated by {{Actor.Name}}.

  • An SSH script was viewed by {{Actor.Name}}.

  • An SQL script was created by {{Actor.Name}}.

  • An SQL script was deactivated by {{Actor.Name}}.

  • An SQL script was updated by {{Actor.Name}}.

  • An SQL script was activated by {{Actor.Name}}.

  • An SQL script was viewed by {{Actor.Name}}.

  • A domain was added to the site by {{Actor.Name}}.

  • A domain was removed from the site by {{Actor.Name}}.

  • Engine was disconnected.

  • Engine was connected.

  • A dual control was created by {{Actor.Name}}.

  • A dual control was updated by {{Actor.Name}}.

  • A dual control was deleted by {{Actor.Name}}.

  • A secret was activated by {{Actor.Name}}.

  • A secret was created by {{Actor.Name}}.

  • A secret was deactivated by {{Actor.Name}}.

  • An erase of a secret was requested by {{Actor.Name}}.

  • A secret was launched by {{Actor.Name}}.

  • A web session for a secret was launched by {{Actor.Name}}.

  • A failed secret dependency was encountered by {{Actor.Name}}.

  • Secret view was edited by {{Actor.Name}}.

  • A secret password requirement was added by {{Actor.Name}}.

  • Secret password requirement was removed by {{Actor.Name}}.

  • Secret password change was unsuccessful.

  • Engine was deleted by {{Actor.Name}}.

  • Security analytics configuration was updated by {{Actor.Name}}.

  • Secret settings were exported by {{Actor.Name}}.

  • Secret settings were imported by {{Actor.Name}}.

  • User was updated by {{Actor.Name}}.

  • 2 Factor settings were reset by {{Actor.Name}}.

  • Failed to reset the 2 Factor settings by {{Actor.Name}}.

  • Personally identifiable information was removed by {{Actor.Name}}.

  • A license was added by {{Actor.Name}}.

  • A license was deleted by {{Actor.Name}}.

  • Password changer was created by {{Actor.Name}}.

  • Password changer was updated by {{Actor.Name}}.

  • Password changer was enabled by {{Actor.Name}}.

  • Password changer was disabled by {{Actor.Name}}.

  • A command on the password changer was updated by {{Actor.Name}}.

  • A command on the password changer was created by {{Actor.Name}}.

  • A command from the password changer was deleted by {{Actor.Name}}.

  • Authentication on the password changer was updated by {{Actor.Name}}.

  • The scanned field on the password changer was updated by {{Actor.Name}}.

  • Password requirement was created by {{Actor.Name}}.

  • Password requirement was edited by {{Actor.Name}}.

  • Domain was created by {{Actor.Name}}.

  • Domain was updated by {{Actor.Name}}.

  • Group was created by {{Actor.Name}}.

  • Group was edited by {{Actor.Name}}.

  • Key management encryption was enabled by {{Actor.Name}}.

  • Key management encryption was updated by {{Actor.Name}}.

  • Key management encryption was disabled by {{Actor.Name}}.

  • Data replication for disaster recovery was successful by {{Actor.Name}}.

  • Data replication for disaster recovery was initiated by {{Actor.Name}}.

  • Data replication for disaster recovery failed for {{Actor.Name}}.

  • Data replica for disaster recovery was created by {{Actor.Name}}.

  • Data replica for disaster recovery was approved by {{Actor.Name}}.

  • Data replica for disaster recovery was disabled by {{Actor.Name}}.

  • Data replica for disaster recovery was deleted by {{Actor.Name}}.

  • Data replica for disaster recovery was unapproved by {{Actor.Name}}.

  • Data replica folder for disaster recovery was updated by {{Actor.Name}}.

  • Configuration was upgraded by {{Actor.Name}}.

  • Configuration was backed up by {{Actor.Name}}.

  • Configuration database was updated by {{Actor.Name}}.

  • TLS failed for {{Actor.Name}}.

  • Domain was synchronized by {{Actor.Name}}.

  • Secret pre-checkout was run by {{Actor.Name}}.

  • Secret pre-checkin was run by {{Actor.Name}}.

  • SSH proxy for the site was enabled by {{Actor.Name}}.

  • SSH proxy for the site was disabled by {{Actor.Name}}.

  • RDP proxy for the site was enabled by {{Actor.Name}}.

  • RDP proxy for the site was disabled by {{Actor.Name}}.

  • Site proxy endpoint was updated by {{Actor.Name}}.

  • Engine proxy endpoint was updated by {{Actor.Name}}.

  • Security application hardening for secret settings was enabled by {{Actor.Name}}.

  • Security application hardening for secret settings was disabled by {{Actor.Name}}.

  • Security application hardening for secret settings was bypassed by {{Actor.Name}}.

  • Security application hardening for secret settings was updated by {{Actor.Name}}.

  • MEK rotation for encryption was initiated by {{Actor.Name}}.

  • MEK rotation for encryption was retried by {{Actor.Name}}.

  • The MEK for encryption was successfully rotated by {{Actor.Name}}.

  • MEK rotation for encryption failed for {{Actor.Name}}.

  • SSH proxy was enabled by {{Actor.Name}}.

  • SSH proxy was disabled by {{Actor.Name}}.

  • RDP proxy was enabled by {{Actor.Name}}.

  • RDP proxy was disabled by {{Actor.Name}}.

  • Node proxy endpoint was updated by {{Actor.Name}}.

  • Disaster recovery configuration was updated by {{Actor.Name}}.

  • Character set was created by {{Actor.Name}}.

  • Character set was updated by {{Actor.Name}}.

  • Character set was enabled by {{Actor.Name}}.

  • Character set was disabled by {{Actor.Name}}.

  • Backup configuration was updated by {{Actor.Name}}.

  • Backup failed for {{Actor.Name}}.

  • Platform synchronized.