https://catalogartifact.azureedge.net/publicartifacts/uniqkey.azure-sentinel-solution-uniqkey-2cb9432c-58c0-4b5c-937f-690f3be35317/image2_uniqkeylogo256216x216.png
Uniqkey Security Events for Microsoft Sentinel
by Uniqkey A/S
Just a moment, logging you in...
Stream Uniqkey password management security events into Microsoft Sentinel
Uniqkey Security Events for Microsoft Sentinel
Uniqkey is a European business password management platform with a zero-knowledge security architecture. This solution brings Uniqkey's audit trail into Microsoft Sentinel so your security team can monitor credential activity alongside the rest of your estate.
What's included:
- Data connector (codeless / CCF): polls the Uniqkey SIEM API on a schedule and ingests events into the UniqkeyEvents_CL table. Covers authentication, credential access, credential management, sharing, device management, account and group management, policy changes, data exports, and platform threat detections.
- 9 analytics rules: detections for scenarios such as credential export from newly created accounts, departing-employee exports, sign-ins from unfamiliar IP addresses, excessive credential access, security policy changes, self-granted privilege changes, and interrupted event ingestion.
- Workbook: an overview of event volume, categories, sign-in locations, top users, data exports, and threat detections.
Prerequisites:
- An active Uniqkey organization.
- A Uniqkey SIEM API token, generated by your organization administrator in the Uniqkey Admin Portal (Settings > Integrations > SIEM).
Events are organization-scoped and delivered over an authenticated HTTPS API with cursor-based paging, supporting both live tailing and full-history backfill.
At a glance
https://catalogartifact.azureedge.net/publicartifacts/uniqkey.azure-sentinel-solution-uniqkey-2cb9432c-58c0-4b5c-937f-690f3be35317/image1_screenshot1connectorconnected.png
https://catalogartifact.azureedge.net/publicartifacts/uniqkey.azure-sentinel-solution-uniqkey-2cb9432c-58c0-4b5c-937f-690f3be35317/image3_screenshot2workbook.png
https://catalogartifact.azureedge.net/publicartifacts/uniqkey.azure-sentinel-solution-uniqkey-2cb9432c-58c0-4b5c-937f-690f3be35317/image0_screenshot3logs.png