Datadog API Credentials

Description

General

• Documentation: https://docs.datadoghq.com/account_management/api-app-keys/#api-keys
• Summary: Datadog is a monitoring service for cloud-scale applications, providing monitoring of servers, databases, tools, and services, through a SaaS-based data analytics platform. The service is also available via an API. All requests to Datadog's API must be authenticated. An API key is required for a local Datadog agent to push data to the corresponding Datadog dashboard and requests that read data require full access and also require an application key This detector aims at catching these keys.
• IPs allowlist: This feature is not mentioned in the documentation.
• Scopes: This key allows users to push data to the corresponding Datadog dashboard. All API keys have the same write-only access rights.

Revoke the secret

Credentials can be revoked from the Integration/API tab in the application. See the docs for more information.

Check for suspicious activity

This feature is not mentioned in the documentation.

Details for Datadog Key

• Family: credentials

• Category: monitoring

• Company: Datadog

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: True

• Minimum number of matches: 1

• Occurrences found for one million commits: 1.26

• Prefixed: False

• PreValidators:

- type: FilenameBanlistPreValidator
  banlist_extensions:
    - ^lock$
    - ^storyboard(c|er)?~?$
    - ^xib$
  banlist_filenames: []
  check_binaries: false
  include_default_banlist_extensions: false
  ban_markup: false
- type: ContentWhitelistPreValidator
  patterns:
    - datadog
    - dogapi
    - dd[_-]?api[_-]?key

Examples

- text: dogapi token = "dd52c29224affe29d163c6bf99e5c34f";
  apikey: dd52c29224affe29d163c6bf99e5c34f
- text: datadog token = "3c0c3965368a6b10f7640dbda46abfdc";
  apikey: 3c0c3965368a6b10f7640dbda46abfdc

Details for Datadog Keys

• Family: credentials

• Category: monitoring

• Company: Datadog

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: True

• Minimum number of matches: 2

• Occurrences found for one million commits: 0.82

• Prefixed: False

• PreValidators:

- type: FilenameBanlistPreValidator
  banlist_extensions: []
  banlist_filenames: []
  check_binaries: false
  include_default_banlist_extensions: true
  ban_markup: false
- type: ContentWhitelistPreValidator
  patterns:
    - datadog
    - dd([_-]client)?[_-]ap[pi][_-]key

Examples

- text: |
    datadog
    key = 3c0c3965368a6b10f7640dbda46abfd2
    secret= 3c0c3965368a6b10f7640dbda46abfdca981c2d3
  client_id: 3c0c3965368a6b10f7640dbda46abfd2
  client_secret: 3c0c3965368a6b10f7640dbda46abfdca981c2d3
- text: datadog key = 3c0c3965368a6b10f7640dbda46abfd2 secret= 3c0c3965368a6b10f7640dbda46abfdca981c2d3

  client_id: 3c0c3965368a6b10f7640dbda46abfd2
  client_secret: 3c0c3965368a6b10f7640dbda46abfdca981c2d3