Who Does SUDO report to?

Just to answer the question: The incident will normally be reported to the auth.log and possibly mailed to root. The behavior can be configured at compile time or in the sudoers file. For more information, see man sudo and man sudoers.

Santa has a keylogger in every machine. Maybe that's how he can afford all the presents :)

Wait, so who gets reported as "NICE"?