Refactored security event ATs for admin tools