OnePasswordEventLogs_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index

Attribute Value
Ingestion API Supported ✓ Yes

Contents

Schema (28 columns)

Source: Connector definition

Column Name Type
action string
action_type string
actor_details dynamic
actor_uuid string
aux_details dynamic
aux_id int
aux_info string
aux_uuid string
category string
client dynamic
country string
details dynamic
item_uuid string
location dynamic
log_source string
object_details dynamic
object_type string
object_uuid string
session dynamic
session_uuid string
SourceSystem string
target_user dynamic
TimeGenerated datetime
timestamp datetime
used_version int
user dynamic
uuid_s string
vault_uuid string

Solutions (1)

This table is used by the following solutions:

Connectors (3)

This table is ingested by the following connectors:

Connector Selection Criteria
1Password
1Password (Serverless)
1Password (Serverless)

Content Items Using This Table (20)

Analytic Rules (18)

In solution 1Password:

Analytic Rule Selection Criteria
1Password - Changes to SSO configuration
1Password - Changes to firewall rules
1Password - Disable MFA factor or type for all user accounts
1Password - Log Ingestion Failure
1Password - Manual account creation
1Password - New service account integration created
1Password - Non-privileged vault user permission change
1Password - Potential insider privilege escalation via group
1Password - Potential insider privilege escalation via vault
1Password - Privileged vault permission change
1Password - Secret extraction post vault access change by administrator
1Password - Service account integration token adjustment
1Password - Successful anomalous sign-in
1Password - User account MFA settings changed
1Password - User added to privileged group
1Password - Vault export
1Password - Vault export post account creation
1Password - Vault export prior to account suspension or deletion

Workbooks (2)

In solution 1Password:

Workbook Selection Criteria
1Password

GitHub Only:

Workbook Selection Criteria
1Password

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Tables Index