Skip to content
Sign In
Telemetry

saas:audit

SaaS application audit logs (Slack, Salesforce, Box, Zoom, Confluence, Snowflake, ...)

Host type
Identity providers and SaaS (Okta, GitHub, Slack, ...)
Tier, as a whole
Minimum
Cost class
Paid service
Techniques
36
Rules listed
97
Events
19

Licensing

License or service
Event Monitoring add-on (10% net spend) or Shield (30%)
What is free
Nothing stated
What costs
Percent-of-spend add-on
Vendor page
https://www.salesforce.com/platform/shield/pricing
As read on
2026-11-01

A vendor statement as read on the date shown; the cost class is the durable part.

Techniques

Rules

Sigma 16
Microsoft Sentinel 81

Events

Dataset version 0.5.3, built 2026-11-08, from public sources only. Vendor rule names, requirement text and ATT&CK content are reproduced as published; the links between them are the authors' analysis. See the references for each source, its version and its license.