Change log for ONEPASSWORD
Date | Changes |
---|---|
2024-07-08 | Enhancement:
- Mapped "item.actor_details.uuid" to "principal.user.userid". - Mapped "item.actor_details.name" to "principal.user.user_display_name". - Mapped "item.actor_details.email" to "principal.email". - Mapped "item.actor_uuid" to "security_result.about.resource.attribute.labels". - Mapped "item.object_type" to "additional.fields". - Mapped "item.object_uuid" to "security_result.about.resource.attribute.labels". - Mapped "item.aux_info" to "additional.fields". - Mapped "item.aux_uuid" to "security_result.about.resource.attribute.labels". - Mapped "item.session.uuid" to "network.session_id". - Mapped "item.session.device_uuid" to "target.resource.product_object_id". - Mapped "item.session.ip" to "principal.ip". |
2023-06-07 | Enhancement:
- Remapped "target_user.name" to "target.user.user_display_name". - Remapped "target_user.email" to "target.user.email_addresses". - Remapped "target_user.uuid" to "target.user.userid". - If user fields are not present, changed "metadata.event_type" to "STATUS_UPDATE". |
2023-05-05 | Enhancement:
- Added gsub function to correct format and parse the unparsed logs. |
2023-04-27 | Enhancement:
- Provided parsing support for multiple fields in "items" array by using loop. |
2023-02-15 | Enhancement: Mapped/Modified the following fields-
- Unmapped "user.uuid" and "uuid". - Modified mapping of "target_user.email" from "target.user.userid" to "principal.user.email_addresses". - Modified mapping of "target_user.uuid" from "target.user.product_object_id" to "principal.user.userid". |
2023-02-06 | Enhancement:
- Mapped "metadata.vendor_name" and "metadata.product_name". |
2023-01-15 | Enhancement:
- Mapped "uuid" to "principal.userid". - If "user.uuid" and "uuid" are present then map "uuid" to "additional.fields". - Mapped "location.region" to "principal.location.name". - Mapped "metadata.product_version" to "client.app_version". - Mapped "principal.asset.platform_software.platform_version" to "client.platform_version". - Mapped "type","action","used_version"," to "additional.fields". - Mapped "client.platform_name" to "principal.resource.attribute.labels". - Mapped "vault_uuid" to "security_result.about.resource.attribute.labels". - Mapped "country" to "principal.location.country_or_region". - If "category" is equal to "success", then map "security_result.action" to "ALLOW". - Mapped "category" to "security_result.category_details". - Re-Mapped "target_user.email" to "target.user.userid". - Re-Mapped "target_user.uuid" to "target.user.product_object_id". - Re-Mapped "item_uuid" to "about.resource.attribute.labels". |
2022-10-07 | Newly created parser |