@@ -1694,17 +1694,19 @@ print_listAuditEvents_help() {
1694
1694
echo -e "<p>List Audit log events from the Kandji Activity module.</p>
1695
1695
<p>Returns events related to</p>
1696
1696
<ul>
1697
- <li><p>Blueprint CUD, Library Item CUD</p>
1697
+ <li><p>Blueprint and Library Item creation, updates, and deletions ( CUD) </p>
1698
1698
</li>
1699
- <li><p>When some sensitive data is viewed (e.g., FileVault keys, recovery keys)</p>
1699
+ <li><p>Access to sensitive data (such as FileVault keys and recovery keys)</p>
1700
1700
</li>
1701
- <li><p>Device deleted, enrolled, mdm removed, changed blueprint</p>
1701
+ <li><p>Device lifecycle events (enrollment, deletion, MDM removal, blueprint changes) </p>
1702
1702
</li>
1703
- <li><p>User directory events (e.g., directory user deletions)</p>
1703
+ <li><p>User directory events (including directory user deletions)</p>
1704
1704
</li>
1705
- <li><p>API actions, Kandji tenant owner updates, API token CUD, Kandji admin user management CUD</p>
1705
+ <li><p>Administrative actions ( tenant owner updates, API token management ( CUD)) </p>
1706
1706
</li>
1707
- <li><p>Vulnerability management customers can see events detections and remediations.</p>
1707
+ <li><p>Admin user management activities</p>
1708
+ </li>
1709
+ <li><p>Vulnerability management detections and remediations (for customers with this feature)</p>
1708
1710
</li>
1709
1711
</ul>" | paste -sd' ' | fold -sw 80
1710
1712
echo -e ""
0 commit comments