EM
Event Monitoring
A Salesforce Shield feature that tracks and logs user activity in the org, including logins, report exports, API calls, and page views, for security auditing and forensic analysis.
Example use case
A security team uses Event Monitoring to detect a spike in report exports by a specific user and investigate potential data exfiltration.