Security operations,
reports and audit records.
Imperum brings investigation, casework, automation and operational reporting into one environment. Explore how work is handled, how performance is reviewed and which records you can export.
Security operations
Investigate alerts. Work cases.
Run configured automation.
Explore the platform Autonomous SOC Integrations
Review performance.
Build the report.
Inspect current case workload and cases closed in a selected period. Use supported KPI widgets to prepare a report for an operational review.
Inspect case records, review their metrics, then prepare a separate report.
Open cases (4)
Current snapshot · oldest opened first
EX-004network-activity investigation
- Status
- open
- Priority
- P4
- Opened
- 14 Sep, 12:00 UTC
- Age at snapshot
- 35 days
- Assignee
- Example analyst B
- Use case
- Illustrative network activity
EX-003identity investigation
- Status
- open
- Priority
- P3
- Opened
- 10 Oct, 12:00 UTC
- Age at snapshot
- 9 days
- Assignee
- Example analyst A
- Use case
- Illustrative identity investigation
EX-002endpoint alert review
- Status
- open
- Priority
- P2
- Opened
- 19 Oct, 06:00 UTC
- Age at snapshot
- 0 days
- Assignee
- Example analyst B
- Use case
- Illustrative endpoint alert
EX-001account-access review
- Status
- open
- Priority
- P2
- Opened
- 19 Oct, 11:00 UTC
- Age at snapshot
- 0 days
- Assignee
- Example analyst A
- Use case
- Illustrative account access
SOC operations review
Synthetic example — not customer data
A separate report can include these KPI summaries. Product data is resolved when the report is generated.
Preview only. No report is sent.
Choose what the audience needs.
Reports can combine KPI summaries with other operational widgets. Retrieve available files from report History, or configure scheduled delivery to selected recipients.
Use the appropriate format.
KPI datasets support CSV and XLSX. Reports support PDF, Excel, CSV and HTML; PDF can fall back to HTML when rendering is unavailable. Actions depend on permissions. Scheduled delivery also requires configured email.
Find the records
behind a decision.
Filter recorded events by time, action, category or result. Search by actor or resource name, then export matching entries as CSV or JSON.
Filter recorded events, inspect available detail, then export matching entries.
Last 7 days · all actions, categories and results
4 matching sample events
Example analyst ALoginExample analyst A accountSuccess
- Event
- EX-AUD-001
- Timestamp
- 2026-10-19T11:30:00Z
- Actor
- Example analyst A · analyst-a@example.invalid
- Resource
- Example analyst A account (user / example-actor-a)
- Category
- Authentication
- Details
- Recorded event in this synthetic example.
No change detail recorded.
Example analyst AUpdatedIllustrative identity investigationSuccess
- Event
- EX-AUD-002
- Timestamp
- 2026-10-19T10:00:00Z
- Actor
- Example analyst A · analyst-a@example.invalid
- Resource
- Illustrative identity investigation (case / EX-003)
- Category
- Case Management
- Details
- Recorded event in this synthetic example.
Example analyst AExportedIllustrative resolved account-access caseSuccess
- Event
- EX-AUD-003
- Timestamp
- 2026-10-18T13:00:00Z
- Actor
- Example analyst A · analyst-a@example.invalid
- Resource
- Illustrative resolved account-access case (case / EX-005)
- Category
- Case Management
- Details
- Illustrative individual case incident report export
No change detail recorded.
Example analyst BLoginExample analyst B accountFailure
- Event
- EX-AUD-004
- Timestamp
- 2026-10-16T09:00:00Z
- Actor
- Example analyst B · analyst-b@example.invalid
- Resource
- Example analyst B account (user / example-actor-b)
- Category
- Authentication
- Details
- Illustrative unsuccessful sign-in
No change detail recorded.
Available product formats: CSV and JSON.
View the sample file content
Viewing and exporting require the appropriate permissions. Product exports cover matching recorded entries in your authorized scope and are capped at 10,000 rows. Available change detail depends on what was recorded.
Need the detail of one investigation?
Create an incident report from that case’s available findings, timeline and notes. It is a separate output from the Audit Log.
Explore Casebook evidenceMatch the output
to the question.
KPI dataset
Analyze the underlying metric data.
CSV / XLSXGenerated report
Present selected widgets and context for an audience.
PDF / Excel / CSV / HTMLAudit export
Review recorded events matching your filters.
CSV / JSONCase incident report
Read the available material from one investigation.
PDF / HTMLPDF can fall back to HTML when rendering is unavailable. A case’s JSON Export action is distinct from its printable incident report.
Start with the question
you need to answer.
- 01
Choose the audience.
Use KPI data for analysis, a report for a review, or recorded events for an activity query.
- 02
Check scope and access.
Confirm the workspace, period and permissions appropriate to the work.
- 03
Review before sharing.
Inspect the output and its context. Configure report delivery when the required mail setup is available.
SOC leads can choose reports for operational reviews; analysts can inspect case detail and recorded events. Access to each action depends on permissions and configuration. Discuss the capabilities available for your deployment in a product demo.
Reporting and audit questions.
1Are all KPIs based on cases?
The examples here use current case workload and cases closed in a selected period. Reports can also include other operational data.
2Can I schedule report delivery?
Report subscriptions support scheduled delivery to selected recipients. Scheduling permissions and a configured mail provider are required.
3Does an audit export contain all evidence?
It contains matching recorded audit entries within your access scope and the export limit. A report for one case is separate; available change detail depends on what was recorded. Audit logging is configurable and is not a guarantee that every action or attachment appears in an export.
4Which formats are available?
KPI datasets use CSV and XLSX; reports offer PDF, Excel, CSV and HTML; audit records use CSV and JSON. Individual case reports can render as PDF or HTML. PDF output can fall back to HTML when its renderer is unavailable.
Have another question?
Talk to our team
See reporting and audit
in your workflow.
Explore the outputs your team needs in a product demo.
Book a Demo