Google Cloud
Quick Google Cloud CLI pivots for audit activity.
Recent project audit activity
gcloud logging read 'logName:"cloudaudit.googleapis.com"' --limit=50 --format=json
Administrative activity
gcloud logging read 'log_id("cloudaudit.googleapis.com/activity")' --limit=50