You can create transaction security policies on these Real-Time Event Monitoring events.
Required Editions
| Available in both Salesforce Classic (not available in all orgs) and Lightning Experience. |
|
Available in: Enterprise, Unlimited, and Developer Editions Requires Salesforce Shield or Salesforce Event Monitoring add-on subscriptions. |
- ApiEvent Policies
API events monitor API transactions, such as SOQL queries and data exports. - ApiAnomalyEventStore Policies
API anomaly event policies monitor anomalies in how users make API calls. - BulkApiResultEventStore Policies
Bulk API Result Event policies detect when a user downloads the results of a Bulk API request. - CredentialStuffingEventStore Policies
Credential stuffing event policies monitor when a user successfully logs into Salesforce during an identified credential stuffing attack. Credential stuffing refers to large-scale automated login requests using stolen user credentials. - FileEvent Policies
File event policies detect file-related events, such as when a user downloads a file containing sensitive information. - ListViewEvent Policies
List View event policies monitor when data is viewed or downloaded from your list views using Salesforce Classic, Lightning Experience, or the API. - LoginEvent Policies
Login event policies track login activity and enforce your login requirements. - PermissionSetEventStore Policies
Permission set event policies monitor when users are assigned critical permissions in a permission set or a profile. - ReportEvent Policies
Report event policies monitor when data is viewed or downloaded from your reports. - ReportAnomalyEventStore Policies
Report anomaly event policies monitor anomalies in how users run or export reports. - SessionHijackingEventStore Policies
Session hijacking event policies monitor when unauthorized users gain ownership of a Salesforce user’s session with a stolen session identifier.