We do not have a log to pull this specific information. If there is a security concern, we recommend the department appointed CORE Security Administrator or department controller discuss with the users and managers about the use of access and take action to revoke access if the behavior continues. You may also want to remind the users that when they were given CORE access, they signed the State of Agreement that goes over the End User System Access and Acceptable Use Policy.