Investigate Identity-Related Security Risks

Report an Issue

Is this page helpful?

How can we improve this page?

View as Markdown

Identity Security is available only with Teleport Enterprise.

Skill Available

Teleport Investigate

This skill helps you search and explore Teleport's Identity Security activity log with tctl investigate — finding who did what, where, and when across users, resources, and integrations such as AWS, GitHub, and Okta.

View Raw Skill

The Investigate dashboard provides an overview of recent identity activity across your infrastructure, helping you investigate security risks and incidents. You can see Teleport audit events related to identity, such as certificate issuance and multi-factor authentication challenges, as well as events from integrations such as GitHub and AWS. Because Identity Activity Center visualizes events from multiple integrations at once, you can investigate identity-related incidents that involve pivoting from one system to another.

To visit the Investigate dashboard, open the Teleport Web UI and navigate to Identity Security > Investigate.