The following list of audit events are supported for Box:
| Event Name | Description |
|---|---|
| collaboration_accept | Accepted invites |
| collaboration_expiration | Set collaborator expiration |
| collaboration_invite | Invited |
| collaboration_remove | Removed collaborators |
| collaboration_role_change | Changed user roles |
| copy | Copied |
| delete_user | Deleted user |
| delete | Deleted |
| download | Downloaded |
| edit_user | Edited user |
| edit | Edited |
| failed_login | Failed login |
| file_marked_malicious | Virus found on a file. Event is only received by enterprises that have opted in to be notified. |
| group_add_user | Added user to group |
| group_creation | Created new group |
| group_deletion | Deleted group |
| group_edited | Edited group |
| group_remove_user | Removed user from group |
| item_shared_update | Share links settings updated |
| item_sync | Synced folder |
| item_unsync | Unmarked folder for synced |
| lock | Locked |
| login | Login |
| metadata_instance_create | Creation of metadata instance. |
| metadata_instance_delete | Deletion of metadata instance. |
| metadata_instance_update | Update of metadata instance. |
| move | Moved |
| new_user | Created user |
| preview | Preview a file |
| rename | A file or folder name or description is changed. |
| share_expiration | Set shared link expiration |
| share | Enabled shared links |
| undelete | Restored |
| unlock | Unlocked |
| unshare | Shared link removed |
| update_collaboration_expiration | Extend collaborator expiration |
| update_share_expiration | Extend shared link expiration |
| upload | Uploaded |

