---
title: "LastPass"
slug: "lastpass"
tags: ["Self Service Ingestion"]
updated: 2025-02-05T13:01:45Z
published: 2025-02-05T13:01:45Z
canonical: "docs.hunters.ai/lastpass"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hunters.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# LastPass

Self Service Ingestion

          

Connect this data source on your own, using the Hunters platform.

****TL;DR****

| Supported data types | 3rd party detection | Hunters detection | IOC search | Search | Table name | Log format | Collection method |
| --- | --- | --- | --- | --- | --- | --- | --- |
| User Activity Report Events |  |  | ✅ | ✅ | lastpass_user_activity_reports | NDJSON | API |

---

## Overview

![image](https://cdn.document360.io/5f63f0e0-3c70-4d00-b623-82493be0bde5/Images/Documentation/image-1738760405830.png)LastPass is a freemium password manager that stores encrypted passwords online.

After the data is ingested, Hunters read the data from the shared bucket, parse it and allow the usage of this source to protect your users and your network in a more comprehensive way - both in the detection and investigation phases in the Hunters’ pipeline.

## Supported data types

### User Activity Report Events

**Table name:** `lastpass_user_activity_reports`

The User Activity report provides a comprehensive log of every user-related events. The logs include attempted and successful actions.

More information on event types can be found [here](https://support.logmeininc.com/lastpass).

## Send data to Hunters

Hunters supports the collection of logs from LastPass using API.

**To connect LastPass logs:**

1. Retrieve the following information from LastPass:
  - **CID** - your LastPass account number. Example: `12345678`
  - **Provisioning Hash** - can be retrieved using the following [guide](https://support.lastpass.com/help/where-can-i-find-the-cid-and-api-secret#:~:text=Go%20to%20Advanced%20%3E%20Enterprise%20API,the%20top%20of%20the%20page.). Example: `abcdef123456789abcdef123456789abcdef123456789abcdef1234567891234`
2. Complete the process on the Hunters platform, following [this guide](https://hunters.document360.io/docs/connect-a-data-source).

## Expected format

The expected format of the logs is the ndjson format as exported by LastPass.

```json
{"Time": "2021-12-14 22:45:02", "Username": "john@gmail.com", "IP_Address": "0.0.0.0", "Action": "Reporting", "Data": "(initiated by API)"}
```