LaceWork API Keys

Description

General

• Documentation: https://docs.lacework.com/api/api-access-keys-and-tokens
• Summary: Lacework is a cloud security platform. It enables the automation of cloud security without the need for manual setup of rules and policies. Users can use their API access key and its associated KeyID to obtain a short-lived Access Token to interact with the API. The URL of said API reassembles the following format: https://{LaceworkInstanceName}.lacework.net. This detector aims at catching the Lacework organization URL, API access key and the KeyID.

Revoke the secret

An API access key can be either disabled or deleted. See (official documentation)[https://docs.lacework.com/api/api-access-keys-and-tokens].

Details for Lacework API Keys With Account

• Family: credentials

• Category: monitoring

• Company: Lacework

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 3

• Occurrences found for one million commits: 0.006

• Prefixed: False

Details for Lacework API Keys With URL

• Family: credentials

• Category: monitoring

• Company: Lacework

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 3

• Occurrences found for one million commits: 0.001

• Prefixed: False