Re: How to check Detailed Audit Logs for SOAR Play…
SOAR has the audit logs under SOAR Settings, Advanced, Audit.
You can see from an inspection that it is calling /api/external/v1/settings/ExportAuditLastWeekAsCsvV2
THere’s no direct way to do it right now. You could probably piece together a clunky way to do it with a CSV export and then use ingest API to get the data.
I’m questioning the value to do something like this – what would you do with that data if it was in SIEM?
Read more here: Source link