Compliance Exports

PAM-Pro provides single-click evidence generation built explicitly to satisfy rigorous TSC audits (SOC2) and federal mandates.

Generating an Audit Bundle

1. Navigate to Auditing & Retention > Vault WORM Logs.
2. Click New Extract.
3. Select your target temporal boundary (e.g., 01-JAN-2026 to 01-FEB-2026).
4. Select the specific artifact types:
   • JIT Checkouts & Approvals
   • Policy Modifications
   • Break-Glass Emergency Authentications
   • Group Scans and Discovered Drift
5. Click Sign and Export.

Understanding the Bundle Signature

Extracts exported via PAM-Pro contain a cryptographically verifiable manifest file hash. Auditors should cross-reference this SHA-256 string against the Azure Storage static log baseline to explicitly ensure continuous Chain-of-Custody has not been tainted prior to review.