Authentication:
  • Which users successfully logged into Salesforce over the past 7 days?
  • How many users failed to login to Salesforce by source IP over the past 14 days?
  • What are the most common platforms used to successfully login to Salesforce over the past 30 days?
  • Show me logins to Salesforce outside the US over the past 7 days
  • Which client versions were used the most to login to Salesforce over the past 30 days?
  • Which Salesforce usernames were used to generate login failures the least over the past 14 days?
  • What TLS protocols were used to login to Salesforce over the past 14 days?
  • What TLS cipher suites were used to login to Salesforce over the past 7 days?
Audit:
  • Which Salesforce admins performed the most number of changes in the past 30 days?
  • Which delegated users were used the most by Salesforce administrators when making changes in the past 7 days?
  • What Salesforce permissions were changed over the past 7 days?
  • Which Salesforce user profiles were altered the most in the past 30 days?
  • Who performed mass deletions in Salesforce over the past 14 days?
  • Who performed the most exports in Salesforce over the past 7 days?
  • Which admins imported the most data in Salesforce over the past 30 days?
  • What services were activated in Salesforce by admins over the past 7 days?
  • What domains were altered in Salesforce over the past 14 days?
  • What were all the security relevant changes made in Salesforce over the past 24 hours?
  • Which Salesforce users generated the most session timeouts over the past 7 days?