Add more columns to Proton Sentinel (logs)
Authentication method, MFA result, session ID, browser user-agent (if browser logon).
Consent / privacy mode: whether IP, device, ISP, and location collection were enabled at the time. This matters for privacy governance and explaining telemetry gaps.
These logs should be normalized as well and be metadata-focused.
2
votes