Activity timeline
Order shown for clarity. In a live workspace every finding stays tied to the audit history.
sshd PermitRootLogin=yes (expected: prohibit-password)
jump-sbx-01 · high
/etc/ssh/sshd_config: MACs line removed CIS-benchmark MACs
legacy-monolith-01 · medium
New listening TCP 0.0.0.0:9200 (process: java)
batch-worker-03 · high
User prometheus added to sudo group vs baseline
ci-runner-07 · medium
Kernel sysctl net.ipv4.ip_forward toggled to 1
edge-api-01 · low