Keystone After-Hours Logon Activity

Igor Oliveira@Pr0fiLeRR

•updated Feb 28, 2026•0•23

Detects logons to Keystone core banking system outside of business hours. Excludes specific departments and job titles that have extended access. Note: Timezone conversion (UTC to PST), WeekDay function, summarize, and project-reorder are handled natively in KQL post-conversion.