Version: LastPass.

LastPass is a password manager that stores encrypted passwords online. It provides features to keep the critical information safe and secure so you can access it whenever and wherever required. It saves all the passwords, addresses, credit cards, and more in the secure vault.

Netsurion Open XDR facilitates monitoring events retrieved from LastPass. Its dashboard, category, alerts, and reports benefit in detecting any suspicious activities like Master password changed, reverted, and failed activities, MFA disabled activities, and more.

After the LastPass is configured to deliver events to the Netsurion Open XDR, the dashboards and reports can be configured into Netsurion Open XDR.

The following are the key Data Source Integration available in Netsurion Open XDR.


Type Name Description
Security LastPass – Multiple login failure detected This alert is triggered whenever multiple login failure activity is detected.
Security LastPass – Password or Provisioning hash manipulated This alert is triggered whenever a user modifies, reverts, and fails to update the appropriate password or resets the provisioning hash value.
Security LastPass – Multifactor authentication disabled This alert is triggered whenever a user disables the authentication.
Security LastPass – User history purged This alert is triggered whenever the users clear the activity history in their LastPass vault.


Type Name Description
Security LastPass – User activity This report captures all the activities performed by the users.
Security LastPass – Password usage activity by user This report captures all the user’s password usage activities.


The configuration details are consistent with Netsurion Open XDR 9.3 or later, and LastPass.

Download Integration Guide, LastPass Integrator v1.0.0, and How-to Guide for configuration instructions and more information.