Documentation or video to explain the new Event log Object Analytics released recently

Hi @Mona Verma - glad that you have access to the blog & documentation for this feature. 

Let's walk through the high-risk metrics and what to watch for with each: 

1. Guest Aura Requests — Indicates that guest users are invoking Aura requests on a public site. This can be normal behavior, but it can also signal malicious activity. The recommended action is to ensure the principle of least privilege is applied when exposing data to the public internet. See this blog for details. 

2. Deactivated User Login Attempts — A deactivated user is attempting to log into your Salesforce org. This could be a terminated employee trying to regain access, or simply an accident. Depending on context, the right response may be a direct conversation with the person involved. 

3. Anonymous Apex Execution — A frequently requested metric for orgs that want visibility into whether developers are executing code anonymously for potentially malicious purposes, such as exporting data. Reviewing the execution details can help you determine whether a specific run involved suspicious activity. 

4. Insufficient Access — Someone attempted to access data they don't have permission to view. This could be as simple as a user copy-pasting a record ID into the URL bar, or it could reflect a legitimate workflow being blocked by a misconfigured permission. Either way, it's worth reviewing with the user to either address the suspicious behavior or correct the access issue. 

5. Triggered Transaction Security Policies — A transaction security policy created by an admin was triggered. This is worth reviewing to understand who triggered it, whether it was a one-time occurrence, and whether there's a pattern of behavior that may indicate policy violations. It can help you identify users who are either unaware of company policies or actively attempting to exfiltrate data. 

I hope this helps! Let me know if there is anything else I can assist with