import type { AuditContext } from '@cclabsnz/sf-core';
import type { SecurityCheck, CheckResult } from '../SecurityCheck.js';
export declare class SiemIntegrationCheck implements SecurityCheck {
    readonly id = "siem-integration";
    readonly name = "SIEM Integration Signals";
    readonly category = "Event Monitoring";
    readonly description = "SBS-MON-003/004: detects evidence of SIEM or external monitoring integration using cached org data (zero extra queries)";
    readonly dependsOnCache: readonly ['namedCredentialEndpoints', 'remoteSiteUrls', 'connectedAppNames', 'scheduledApexClassNames', 'eventLogSummary'];
    run(ctx: AuditContext): Promise<CheckResult>;
}
//# sourceMappingURL=SiemIntegrationCheck.d.ts.map