---
title: "Kiteworks"
slug: "kiteworks"
tags: ["Self Service Ingestion"]
updated: 2025-02-05T12:46:42Z
published: 2025-02-05T12:46:42Z
canonical: "docs.hunters.ai/kiteworks"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hunters.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Kiteworks

Self Service Ingestion

          

Connect this data source on your own, using the Hunters platform.

****TL;DR****

| Supported data types | 3rd party detection | Hunters detection | IOC search | Search | Table name | Log format | Collection method |
| --- | --- | --- | --- | --- | --- | --- | --- |
| Kiteworks Audit Logs |  |  | ✅ |  | kiteworks_audit_logs | Syslog | S3 |

---

## Overview

![image](https://cdn.document360.io/5f63f0e0-3c70-4d00-b623-82493be0bde5/Images/Documentation/2023-06-07_10-29-38.png)[Kiteworks](https://www.kiteworks.com/platform/security/integration/) is a secure file-sharing and collaboration platform that provides a variety of security features, including advanced threat protection (ATP), data loss prevention (DLP), encryption, and access control. Kiteworks can be integrated to Hunters SOC platform to provide a comprehensive security solution for organizations.

## Supported data types

### Kiteswork Audit Logs

**Table names:** `kiteworks_audit_logs`

Kiteworks [syslog](https://www.kiteworks.com/platform/security/integration/) exports all content and administrative events: file movements, file access, errors, access control changes, privilege changes, user on/offboarding, failed and successful logins, scan failures (AV, ATP, DLP), and more.

## Send data to Hunters

Hunters supports the ingestion of Kiteworks logs via an intermediary AWS S3 bucket.

**To connect Kiteworks logs:**

1. Export your logs from Kiteworks to an AWS S3 bucket.
2. Once the export is completed and the logs are collected to S3, follow the steps in [this section](/v1/docs/connect-data-through-aws-s3).

## Expected format

### Kiteworks Audit Logs

```plaintext
<174>May  7 08:39:35 ksft-h3 rest_server.py: 10.1.2.3, Activity Type: cleanup_upload, Activity Group: file_changes, Activity: Clean up failed upload attempt of file test1.eml
<22>May  7 04:01:03 ksft-h4 sendmail[24230]: 333333rS11111: from=<root@ksft-h4.test1.net>, size=1390, class=-60, nrcpts=1, msgid=<202305070401.347413c1024228@ksft-h4.test1.net>, proto=ESMTP, daemon=MTA, relay=ksft-h4.test1.net [127.0.0.1]
```