Bitwarden - Technical Add-on (3rd party)
Overview
Details
Disclaimer: This is not an official app of Bitwarden itself but the development of third parties!
Technical Add-On for Bitwarden - Password Manager
This extension for Splunk® allows you to retrieve data from the public API of the Bitwarden password manager and integrate this data into your log management. With the setting of the inputs the data of the different endpoints are fetched and indexed. You can then use the lookup tables and logs to create various evaluations, audits, reports or alerts.
Author information
- Author: Nextpart Security Intelligence GmbH
- Version:
X.X.X(dynamic) - Creation: July, 2022
Using this Application
- Source:
bitwarden - Sourcetype:
bitwarden:auditbitwarden:usersbitwarden:groupsbitwarden:collections
Setup
-
After you have installed and activated the app, create an index (e.g. "bitwarden").
-
If you name the index differently, make sure to also change the makro accordingly.
-
Then you can configure and activate the inputs for the different endpoints.
-
In the report section you will find two searches that provide a lookup table for better data quality in the audit log. These searches should be configured to run on a scheduled basis, but you can trigger them once initially to get started.
Copyright & License
Copyright © 2022 Nextpart Security Intelligence GmbH