1Password

Search the rule library.

Object typeEndpointEventsSamplesRule
AccountAudit events133Y
BillingAudit events11N
CredentialsAudit events20N
Delegated sessionAudit events11N
DeviceAudit events42N
Email changeAudit events30N
FileAudit events10N
GroupAudit events53N
Group membershipAudit events32Y
Group vault accessAudit events33Y
InviteAudit events32Y
ItemAudit events21N
Item historyAudit events10N
ItemsAudit events32N
Linked family accountAudit events21N
Managed accountAudit events30N
Migrating userAudit events30N
PlanAudit events00N
ReportAudit events22N
Service accountAudit events21Y
Service account tokenAudit events42Y
Slack appAudit events30N
SSOAudit events70Y
SSO tokenAudit events11N
Stripe cardAudit events30N
Stripe payment methodAudit events20N
Stripe subscriptionAudit events30N
TemplateAudit events50N
UnknownAudit events10N
Unpaired actionAudit events10N
UserAudit events2815Y
User vault accessAudit events33Y
VaultAudit events63Y
Vault keyAudit events00N
Item usageItem usages119Y
Sign-in attemptSign-in attempts3311Y

References