OnePassword¶
About¶
1Password remembers all your passwords for you, and keeps them safe and secure behind the one password that only you know.
The password manager that's as beautiful and simple as it is secure. Just add your passwords and let 1Password do the rest. Sign in to websites and apps with just a few taps, and use the password generator to change your passwords and make them stronger.
Product Details¶
Vendor URL: OnePassword
Product Type: SaaS
Product Tier: Tier III
Integration Method: Cloud Storage
Integration URL: N/A
Log Guide: support.1password.com
Parser Details¶
Log Format: JSON
Expected Normalization Rate: 100%
Data Label: ONEPASSWORD
UDM Fields (list of all UDM fields leveraged in the Parser):
| Log File Field | UDM Field |
|---|---|
| json_log.uuid | metadata.product_log_id |
| json_log.user.name or json_log.target_user.name | principal.user.user_display_name |
| json_log.user.email or json_log.target_user.email | principal.user.email_addresses |
| json_log.user.uuidor json_log.target.user.uuid | principal.user.uderid |
| json_log.client.platform_name and json_log.client.platform_version | network.http.user_agent |
| json_log.client.os_name | principal.platform_version |
| json_log.client.ip_address | principal.ip |
| json_log.client.app_name and json_log.client.app_version | principal.application |
| json_log.vault_uuid | principal.asset.attribute.labels.vault_uuid |
| json_log.item_uuid | principal.resource.product_object_id |
| json_log.location.region | principal.asset.location.name |
| json_log.location.city | principal.asset.location.city |
| json_log.location.latitude | principal.asset.location.region_latitude |
| json_log.location.longitude | principal.asset.location.longitude |
| json_log.location.country | principal.asset.location.country_or_region |
| json_log.catagory | security_result.summary |
| json_log.action | security_result.description |
| json_log.session_uuid | network.session_id |
Product Event Types¶
| Event | UDM Event Classification |
|---|---|
| All events | GENERIC_EVENT |
Log Sample¶
{"uuid":"GUW8JJP6JT2BEOE3RILH4JOZH4","item_uuid":"h36htdogvhkmnfsarcuz7lhu6s","location":{"country":"Some Country","region":"Some State","city":"Some City","latitude":41.402,"longitude":-87.3316},"action":"server-fetch","timestamp":"2022-07-27T12:00:12.952291379Z","used_version":4,"vault_uuid":"ebigmfrsmkh73i3wmgvcdczeey7","user":{"uuid":"OGQVVULKRRC2JDB7OE6HYPRI7Q","name":"John Doe","email":"john.doe@mycompany"},"client":{"ip_address":"10.10.10.1","app_name":"1Password Connect","app_version":"1050401","platform_name":"mypc","platform_version":"amd64","os_name":"Linux","os_version":"11"}}
Sample Parsing¶
metadata.product_log_id "GUW8JJP6JT2BEOE3RILH4JOZH4"
metadata.event_timestamp "2022-07-27T12:00:12.952291379Z"
metadata.event_type "GENERIC_EVENT"
metadata.vendor_name "1Password"
metadata.product_name "1Password"
metadata.product_event_type "server-fetch"
metadata.ingested_timestamp "2022-07-27T12:00:25.445157Z"
metadata.id "AAAAAHiRT/Rt2WbDbYGEdun/xI0AAAAAFAAAAA0AAAA="
principal.user.userid "OGQVVULKRRC2JDB7OE6HYPRI7Q"
principal.user.user_display_name "John Doe"
principal.user.email_addresses[0] "john.doe@mycompany"
principal.ip[0] "10.10.10.1"
principal.application "1Password Connect v.1050401"
principal.platform_version "Linux v.11"
principal.resource.product_object_id "h36htdogvhkmnfsarcuz7lhu6s"
principal.asset.ip[0] "10.10.10.1"
principal.asset.location.city "Some State"
principal.asset.location.country_or_region "Some Country"
principal.asset.location.name "Some State"
principal.asset.location.region_latitude 41.402
principal.asset.location.region_longitude -87.3316
principal.asset.attribute.labels[0].key "vault_uuid"
principal.asset.attribute.labels[0].value "ebigmfrsmkh73i3wmgvcdczeey7"
security_result[0].description "server-fetch"
network.http.user_agent "mypc"
Parser Alerting¶
This product currently does not have any Parser-based Alerting
Rules¶
Coming Soon