Duo

The Duo integration ingests login and user activity logs into Nebulock for usage in creating Findings as well as adding context to Findings.

1. Log in to the Duo Admin Panel with a user who has the Owner Role. Navigate to Applications > Application Catalogue.

   

2. Search for Admin API in the application list and click Add.

   

3. Name the application something memorable that will associate it to Nebulock, and copy the fields from Details. In the Permissions section, ensure the following are checked:

   1. Grant read log permission (Required for Auth and Activity logs).
   2. Optional: Grant read information permission (if we expand to users/devices later).
   

4. In the Nebulock platform, go to Integrations and click Add Integration.

   

5. Select Duo from the provider list and fill in the details with those copied from Step 3.