Most damage to a Discord server is done by somebody who was given permissions legitimately. The staff watch exists for that: it notices when a member of your team does something far outside normal, and can act before the rest happens.
What the staff watch has seen.
What it watches
Cove reads your server’s audit log, not its messages. It knows a channel was deleted; it has no idea what was said in it.
Each signal has a threshold over a rolling window — a burst, not a total. One
ban is Tuesday; six bans in two minutes is not.
The two modes
Start on watch only. Give it a week against your server’s real rhythm, look at
what it flagged, then decide whether the thresholds match how your team
actually works.