Difference between revisions of "Datadog SIEM Content Packs"
Jump to navigation
Jump to search
| Line 8: | Line 8: | ||
| − | + | === Detection Rules === | |
* [[1Password vault export attempt by user]] | * [[1Password vault export attempt by user]] | ||
* [[Unusual 1Password item usage action observed from user]] | * [[Unusual 1Password item usage action observed from user]] | ||
Revision as of 16:06, 26 August 2024
Detection Rules
- 1Password vault export attempt by user
- Unusual 1Password item usage action observed from user
- Impossible travel event observed from 1Password user
- Anomalous amount of failed sign-in attempts by 1Password user
- Unusual 1Password device authorization activity
- Attempt to modify a 1Password item by user
See also
Advertising:
