Detection rules › By event

1Password-ItemUsage

Event	Rules
any	3

any

3 detection rules reference this event. View event page.

Kusto (1)

1Password - Secret extraction post vault access change by administrator severity high T1555

Panther (2)

BETA - Sensitive 1Password Item Accessed severity low T1552
Configuration Required - Sensitive 1Password Item Accessed severity low T1552