Event Monitoring: Transaction Security Retirement, New Events

The Legacy Transaction Security framework was retired. Real-Time Event Monitoring now includes two new events to help you keep an even closer eye on what’s going on in your Salesforce org. Use the new API Anomaly Event to track anomalies in how users make API calls on your org’s data. Implement transaction security policies with BulkApiResultEvent to query large amounts of data to access later.

Legacy Transaction Security: End of Life
With the enhanced transaction security policy framework, you can create transaction security policies that execute actions on any standard or custom object. Now that the new framework is generally available, all policies written with the legacy framework are disabled. Make sure to migrate your legacy transaction security policies to the new framework. This update was first made available in Winter ’20.
Prevent Data Loss with BulkApiResult Event
Preventing data leakage is a key capability of Event Monitoring. Malicious users can perform bulk operations on Salesforce entities to export sensitive org data, so we created a new real-time event that can help you monitor Bulk API activity. Use the new BulkApiResultEvent streaming object and BulkApiResultEventStore storage object to monitor when Bulk API results are downloaded via a REST endpoint or the Bulk API Job page in Setup. BulkApiResultEventStore supports Transaction Security.
Detect Anomalies in API Queries with New ApiAnomalyEvent
Track security threats to your Salesforce org with a brand new Real-Time Event Monitoring event. With ApiAnomalyEvent, you can track anomalies in how users make API calls to your org’s data. The associated storage object ApiAnomalyEventStore supports transaction security policies.
Analyze Unexpected Exceptions in the Event Monitoring Analytics App
The Event Monitoring Analytics App just got more user-friendly with the addition of an EventLogFile event type. With the Apex UnexpectedException Event Dataset, you can analyze exceptions in the Analytics app without uploading the dataset manually or via the External Data API.
View Einstein Analytics Data Downloads in Your Event Log Files
Enhance tracking and security of downloaded data from Einstein Analytics with the new Wave Download Event. Download logs are now exposed in Event Monitoring to enable reporting on asset type, ID, dataset ID, Salesforce user type, download format, and number of rows downloaded.
Correlate Threat Data Easier with Restructured JSON Format
The restructured JSON content of SecurityEventData field for the SessionHijackingEvent and SessionHijackingEventStore objects now matches the structure of other threat events. Using the same JSON structure makes it easier to view and correlate threat events in the org.

No matches found