Table of Contents | ||||||
---|---|---|---|---|---|---|
|
Configuration requirements
To run this collector, there are some configurations detailed below that you need to consider.
...
Configuration
...
Details
...
Cylance APP
...
You need to run a Cylance app.
...
Application ID
...
Once you create the App, it gives you an Application ID.
...
Application Secret
...
Once you create the App, it gives you an Application Secret.
...
Tenant ID
...
You can find it in your Cylance console.
Info |
---|
Refer to the Vendor setup section to know more about these configurations. |
Overview
...
Overview
With 1Password Collector, you can send your account activity to Devo using the 1Password Events Reporting API. This API can report 1Password activity like sign-in attempts, item usage, and audit events.
Devo collector features
Feature | Details |
---|---|
Allow parallel downloading ( |
|
Running environments |
|
Populated Devo events |
|
Flattening pre-processing |
|
Allowed source events obfuscation |
|
Data sources
Data source | Description | API endpoint | Collector service name | Devo table | Available from release | |||||
---|---|---|---|---|---|---|---|---|---|---|
Audit Events | Returns a list of audit events from the Activity Log. |
| |
|
| |||||
Item Usage Returns information about items in shared vaults that have been modified, accessed, or used. Events include the name and IP address of the user who accessed the item, when it was accessed, and the vault where the item is storedActions | Returns a list of account activity events. |
|
|
|
| |||||
Sign-in Attempts | Returns information about a list of sign-in attempts. Events include the name and IP address of the user who attempted to sign in to the account, when the attempt was made, and -- for failed attempts -- the cause of the failure. |
|
|
|
| Audit | Returns information about actions performed by team members within a 1Password account. Events include when an action was performed and by whom, along with details about the type and object of the action and any other information about the activity. More info here on audit events. |
|
|
|
Configuration requirements
To run this collector, there are some configurations detailed below that you need to consider.
Configuration | Details |
---|---|
Cylance APP | You need to run a Cylance app. |
Application ID | Once you create the App, it gives you an Application ID. |
Application Secret | Once you create the App, it gives you an Application Secret. |
Tenant ID | You can find it in your Cylance console. |
Info |
---|
Refer to the Vendor setup section to know more about these configurations. |
For more information on how the events are parsed, visit our page.
...