--- title: "Audit Log & Forensic Investigation" description: "Leveraging native Discord audit logs and webhook pipelines to substantiate disciplinary actions with solid evidence." --- import { Steps } from '@astrojs/starlight/components'; import DiscordMessage from '../../../components/DiscordMessage.astro'; The resolution of any ban appeal or disciplinary dispute invariably relies on **objective forensic evidence**. Never issue high-impact sanctions without auditable records. --- ## Native Discord Audit Logs Discord's internal audit log captures every administrative and moderation action executed across the server over the previous 90 days: - Creation, alteration, or deletion of channels, permissions, and roles. - Kicks (`Kick`), temporary isolations (`Timeout`), and bans (`Ban`). - Webhook creation, modification, and token generation. - Changes to core server configurations and vanity URLs. ### Effective Audit Log Filtering Strategies 1. **Filter by Action Type**: Restrict results directly to the relevant operation (e.g. *Member Ban Add* or *Channel Permission Update*). 2. **Filter by Responsible User**: Quickly isolate actions taken by a specific team member to request context or identify compromised staff accounts. --- ## External Webhook & Message Logging To preserve deleted or edited message contents (which Discord's native audit log omits for privacy reasons), deploy moderation bots connected to private archive channels: