I have a use case where I need to audit when a fulfiller reads a case, as well as an attachment.

[Nicholas Hromya]

How can I set auditing on all cases to see when a fulfiller reads a case or reads an attachment?

[Dominik Simunek]

Check out Events. There might be an event generated when case is viewed and attachmnet is viewed. Events are rotated so it will be lost. You would need to have a Script Action to create/update something that is kept forever (as audit does), for example set a custom field "Viewed at" on the Case to the timestamp of event creation. I would be just really careful with the way how this is implemented as there will be way too many "viewed" events and auditing them all could impact performance and audit size.

[Nicholas Hromya]

I will look into Events. Thank you. However, our auditing/security wants this to be part of the logs. I understand what you mean by how it could impact performance and audit size.