LastPass¶
About¶
LastPass is a secure password manager that stores all of your usernames and passwords in one safe place, called a Vault. After you save a password to your Vault, LastPass always remembers it for you.
As a password manager, LastPass will help you in your day-to-day work while improving the overall security of your online life.
Product Details¶
Vendor URL: LastPass
Product Type: SaaS
Product Tier: Tier III
Integration Method: Cloud Storage
Integration URL: N/A
Log Guide: N/A
Parser Details¶
Log Format: JSON
Expected Normalization Rate: 90-100%
Data Label: LASTPASS
UDM Fields (list of all UDM fields leveraged in the Parser):
| Log File Field | UDM Field |
|---|---|
| Time | metadata.event_timestamp |
| GENERIC_EVENT | metadata.event_type |
| Action | metadata.product_event_type |
| Data | metadata.description |
| Username | metadata.principal.user.userid |
| IP_Address | metadata.ip |
| Data | metadata.administrative_domain |
Product Event Types¶
| Event | UDM Event Classification |
|---|---|
| All events | GENERIC_EVENT |
Log Sample¶
Eventx.author":{"Time":"2022-01-19 19:42:17","Username":"john.doe@domain.com","IP_Address":"10.1.1.54","Action":"Site Changed","Data":"domain.com"},
Sample Parsing¶
metadata.event_timestamp: 2022-01-19 19:42:17
metadata.event_type: GENERIC_EVENT
metadata.product_event_type: "Site Changed"
metadata.description: "domain.com"
metadata.principal.user.userid: "john.doe@domain.com"
metadata.principal.ip: "10.1.1.54"
metadata.principal.administrative_domain: "domain.com"
Parser Alerting¶
This product currently does not have any Parser-based Alerting
Rules¶
Coming Soon