{"id":"E004","at":"2026-09-01T09:04:00Z","asset":"identity-gateway","actor":"training-user-a","event":"policy_change","field":"admin_mfa","before":true,"after":false,"change_ticket":null}
{"id":"E001","at":"2026-09-01T09:00:00Z","asset":"identity-gateway","actor":"training-operator","event":"login_success","mfa":true}
{"id":"E007","at":"2026-09-01T09:10:00Z","asset":"training-storage","actor":"training-user-a","event":"public_access_change","before":false,"after":true,"change_ticket":null}
{"id":"E003","at":"2026-09-01T09:03:00Z","asset":"identity-gateway","actor":"training-user-a","event":"role_change","before":"viewer","after":"admin","change_ticket":null}
{"id":"E002","at":"2026-09-01T09:02:00Z","asset":"identity-gateway","actor":"training-operator","event":"role_change","before":"viewer","after":"operator","change_ticket":"TRAIN-001-approved"}
{"id":"E006","at":"2026-09-01T09:06:00Z","asset":"identity-gateway","actor":"training-user-a","event":"login_success","mfa":false}
{"id":"E005","at":"2026-09-01T09:05:00Z","asset":"identity-gateway","actor":"training-user-a","event":"login_failed","reason":"incorrect_password"}
{"id":"E008","at":"2026-09-01T09:11:00Z","asset":"training-storage","actor":"training-user-a","event":"list_objects","count":3,"objects_are_synthetic":true}