Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents
minLevel2
maxLevel2
typeflat

Configuration requirements

To run this collector, there are some configurations detailed below that you need to consider.

...

Configuration

...

Details

...

Cylance APP

...

You need to run a Cylance app.

...

Application ID

...

Once you create the App, it gives you an Application ID.

...

Application Secret

...

Once you create the App, it gives you an Application Secret.

...

Tenant ID

...

You can find it in your Cylance console.

Info

Refer to the Vendor setup section to know more about these configurations.

Overview

...

Overview

With 1Password Collector, you can send your account activity to Devo using the 1Password Events Reporting API. This API can report 1Password activity like sign-in attempts, item usage, and audit events.

Devo collector features

Feature

Details

Allow parallel downloading (multipod)

not allowed

Running environments

  • collector server

  • on premise

Populated Devo events

standardtable

Flattening pre-processing

no

Allowed source events obfuscation

yes

Data sources

v0.1.2

Data source

Description

API endpoint

Collector service name

Devo table

Available from release

Audit Events

Returns a list of audit events from the Activity Log.

/api/v1/auditevents

audit

auth.agilebits.onepassword.audit

v1.0.1

Item Usage Returns information about items in shared vaults that have been modified, accessed, or used. Events include the name and IP address of the user who accessed the item, when it was accessed, and the vault where the item is storedActions

Returns a list of account activity events.

/api/v1/itemusages

item_usage

auth.agilebits.onepassword.itemusage

v0v1.10.0

Sign-in Attempts

Returns information about a list of sign-in attempts. Events include the name and IP address of the user who attempted to sign in to the account, when the attempt was made, and -- for failed attempts -- the cause of the failure.

/api/v1/signinattempts

sign_in_attempts

auth.agilebits.onepassword.signinattempt

v0v1.10.0

Audit

Returns information about actions performed by team members within a 1Password account. Events include when an action was performed and by whom, along with details about the type and object of the action and any other information about the activity. More info here on audit events.

/api/v1/auditevents

audit

auth.agilebits.onepassword.audit

Configuration requirements

To run this collector, there are some configurations detailed below that you need to consider.

Configuration

Details

Cylance APP

You need to run a Cylance app.

Application ID

Once you create the App, it gives you an Application ID.

Application Secret

Once you create the App, it gives you an Application Secret.

Tenant ID

You can find it in your Cylance console.

Info

Refer to the Vendor setup section to know more about these configurations.

For more information on how the events are parsed, visit our page.

...