Connect this data source on your own, using the Hunters platform.
TL;DR
Supported data types | 3rd party detection | Hunters detection | IOC search | Search | Table name | Log format | Collection method |
---|---|---|---|---|---|---|---|
Island timeline | ✅ | island_timeline | NDJSON | API | |||
Island Identity Objects | ✅ | island_identity_objects | NDJSON | API | |||
Island browser devices | island_browser_devices | NDJSON | API |
Overview
Island Browser is a Chromium-based enterprise browser designed to enhance corporate security and IT governance. It enables enterprises to control and monitor how users interact with web applications, focusing on preventing data leakage and enforcing security policies. The browser integrates features like web filtering, exploit prevention, and support for Zero Trust access.
Supported data types
Island timeline
Table name: island_timeline
Island timeline logs are records or detailed logs capturing the sequence of user activities and events while using the browser. These logs serve various purposes, such as auditing, security analysis, compliance monitoring, and troubleshooting within an enterprise context.
Island Identity Objects
Table name: island_identity_objects
Island Identity Objects provides a list of all of devices.
Island browser devices
Table name: island_browser_devices
IdentityObjects entity by email.
Send data to Hunters
Hunters supports the collection of logs from Island using API.
To connect Island logs:
Generate API Key for Island using this guide
Complete the process on the Hunters platform, following this guide.
Expected format
Logs are expected in NDJSON format.
Island timeline
{"userId": "samlp|sample-saml-browser-prod|00u600u600u600u6", "deviceId": "79469f9d79469f9d79469f9d", "userName": "mock username", "email": "dummy@cybage.com", "type": "Navigation", "verdict": "Allowed", "timestamp": "2023-12-01T20:24:12.307Z", "topLevelUrl": "https://www.example.com/abc1234", "urlWebCategories": ["Business and Economy"], "saasApplicationName": "Salesforce.com", "saasApplicationCategory": "E-Commerce Tools", "urlWebReputation": 96, "tabId": 798644001, "ruleId": "abbb5bc3", "ruleName": "Allowed Business Applications ", "details": "{\n \"navigation_details\": {\n \"is_iframe\": false\n }\n}", "incognito": false, "sourceIp": "172.4.4.4", "publicIp": "123.1.1.1", "machineName": "test.test.com", "tenantId": "sample", "id": "4cb1f562", "createdDate": "2024-01-18T14:37:06.970651Z", "updatedDate": "2024-01-18T14:37:06.970651Z"}
Island browser devices
{"antiMalwareProducts": ["Avira Security"], "machineId": "C02RC02RC02R", "machineName": "John-MacBook-Pro-2", "machineModel": "MacBookPro12,1", "serialNumber": "C02RC02RC02R", "userName": "John S\u00f8rensen", "userId": "samlp|kayak-saml-browser-prod|00u800u800u8", "email": "jognk@gmail.com", "osPlatform": "MacOs", "islandPlatform": "Browser", "osVersion": "12.6.9", "browserVersion": "1.32.20", "chromiumVersion": "120.0.6099.216", "extensionVersion": "1.5058.2", "lastSeen": "2024-01-12T16:07:11.790079Z", "policyUpdateTime": "2023-12-08T14:29:32.393191Z", "diskEncrypted": true, "osUserName": "John", "status": "Active", "internalIpAddress": "192.168.2.1", "externalIpAddress": "62.111.1.1", "osDomain": "", "systemIntegrityProtection": true, "osFirewallEnabled": true, "osScreenLockEnabled": true, "isVirtualMachine": false, "browserName": "Island", "authMethod": "UserToken", "isArchived": false, "macAddresses": "f4:5c:89:ff:ff:ff | 82:13:13:ff:ff:ff", "cpuModel": "Intel(R) Core(TM) i5-5257U CPU @ 2.70GHz", "architecture": "x86_64", "ramSize": 8, "syncEnabled": false, "tenantId": "dummy", "id": "70ad524a", "createdDate": "2023-09-12T08:58:44.688064Z", "updatedDate": "2024-01-12T16:07:11.793245Z"}
Island identity objects
{"identityFilters": [{"type": "User", "value": "test1@ktest1.com"}], "excludedIdentityFilters": [], "name": "Austin Test", "description": "", "matchingType": "Any", "updatedByUser": {"firstName": "test", "lastName": "Admin", "name": "Test Admin", "email": "support@test.io", "auth0UserId": "samlp|island-saml-mc-production|00u6o00u6o00u6o", "id": "70f5dbbd", "createdDate": "1970-01-01T00:00:00Z", "updatedDate": "1970-01-01T00:00:00Z"}, "tenantId": "dummy", "id": "097ef25d-6c48-4e0a-95a1-a0afbb113d6a", "createdDate": "2023-07-17T12:37:46.004238Z", "updatedDate": "2023-07-17T12:37:46.004238Z"}