Using audit logs is a pain. Especially when dealing with managed services. Spectre may consider to integrate with vendor specific APIs to ingest or proxy audit logs.