Hey all. I’m trying to identify when a user has Duo MFA removed from their account using the Duo logs. Specifically I’m tryign to accomplish this through a SIEM. I’ve gone through the docs at Duo Admin API | Duo Security. But I don’t see any event/ac...