What kind of activity does SaaS Alerts event monitoring report on?

• User geolocation tracking
• Login success
• Login failure
• User IP location tracking and analysis
• Rapid and repeating authentication failures
• Oauth granted permissions
• Password Resets
• Multiple password resets within a minimal time frame
• Account locks
• Multiple account locks within a minimal time frame
• New device detected
• File link sharing - Internal tracking
• File link sharing - external tracking
• File download to local device
• Orphaned / abandoned internal / external file share links
• File upload
• Anonymous file share link created
• Anonymous file share link accessed
• Anonymous file share link changed
• Secure file share link created
• Secure file share link accessed
• Secure file share link changed
• Company file share link created
• Company file share link removed
• Recipient added secure file share
• File modified
• Confidential file viewed
• External data source integrated
• SaaS App integration
• SaaS App link file sharing
• Security group changes
• Security policy changes
• User promotion to Admin
• SaaS Alert connection to SaaS App terminated