Panther Event Reporting
Description
Panther is a cloud-native security information and event management (SIEM) tool built for security operations at scale, offering flexible detection-as-code, intuitive security workflows, and actionable real-time alerts to keep up with the needs of today’s security teams.
Panther collects, normalizes, and monitors 1Password event logs to help you identify password related suspicious activity in real time. Your normalized data is then retained to power future security investigations in a serverless data lake powered by Snowflake.
1Password event logs show various types of activity in a user's 1Password account, such as item usages and sign-in attempts. Common security use cases for monitoring 1Password logs include identifying:
Sign-in attempts from a user's 1Password account
Items in shared vaults that have been modified, accessed, or used
Unusual or suspicious 1Password account access
Panther customers with a 1Password Business account can set up and use this integration.
Learn more: 1Password Log Monitoring for Panther.