Consists of records of events, actions and transactions captured by systems and applications within the TRE, used for monitoring, audit and investigation purposes.