Verifies the audit chain, counts the audited actions taken by agent tokens (and how many were denied), and lists the controls (single sign-on, directory sync, audit log, SIEM stream, data region, customer keys, retention, MCP allowlist) as enabled or not configured. Identifiers and counts only.
Usage
overlane enterprise evidence-packExamples
overlane enterprise evidence-pack --jsonBehavior
- Effect:
read(changes nothing). - Needs credentials: yes. Uses the network: yes.
- Supports
--dry-run: no. Accepts--force: no. - Machine-readable description:
overlane schema enterprise evidence-pack.
Result
With --json (the default when stdout is not a terminal) the command prints this JSON Schema’s shape on stdout.
{
"type": "object",
"properties": {
"tenantId": {
"type": "string",
"minLength": 1,
"maxLength": 128,
"pattern": "^[A-Za-z0-9][A-Za-z0-9_.:-]*$",
"description": "tenant identifier"
},
"generatedAt": {
"type": "string",
"format": "date-time",
"pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$"
},
"chain": {
"type": "object",
"properties": {
"ok": {
"type": "boolean"
},
"checked": {
"type": "integer",
"minimum": 0,
"maximum": 9007199254740991
},
"head": {
"type": [
"string",
"null"
]
}
},
"required": [
"ok",
"checked",
"head"
],
"additionalProperties": false
},
"agentActions": {
"type": "object",
"properties": {
"total": {
"type": "integer",
"minimum": 0,
"maximum": 9007199254740991
},
"byAction": {
"type": "object",
"propertyNames": {
"type": "string"
},
"additionalProperties": {
"type": "integer",
"minimum": 0,
"maximum": 9007199254740991
}
},
"denied": {
"type": "integer",
"minimum": 0,
"maximum": 9007199254740991
}
},
"required": [
"total",
"byAction",
"denied"
],
"additionalProperties": false
},
"controls": {
"type": "array",
"items": {
"type": "object",
"properties": {
"id": {
"type": "string",
"maxLength": 40
},
"title": {
"type": "string",
"maxLength": 120
},
"state": {
"type": "string",
"enum": [
"enabled",
"not_configured"
]
},
"evidence": {
"type": "string",
"maxLength": 200
}
},
"required": [
"id",
"title",
"state",
"evidence"
],
"additionalProperties": false
}
}
},
"required": [
"tenantId",
"generatedAt",
"chain",
"agentActions",
"controls"
],
"additionalProperties": false
}See exit codes for the status the process returns.