Unusual 1Password item usage action observed from user
Set up the 1password integration.
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter.
Goal
Detect when 1Password item usage activity is observed.
Strategy
This rule monitors 1Password audit logs for the following item usage actions
Note: This rule uses the New Value detection method, to determine when a previously unseen item usage action is observed.
Triage & response
Investigate {{@usr.email}} attempting an item usage action: {{@evt.name}} that they haven’t performed recently with item {{@item_uuid}} within vault {{@vault_uuid}}.
