SIEM: HEC - Bitwarden (Cloud)

TEAM: Huntress Managed Security Information and Event Management (SIEM)
PRODUCT: HTTP Event Collector (HEC)
ENVIRONMENT: Bitwarden Cloud
SUMMARY: Configuration Guide for the cloud version of Bitwarden. With this guide you can use Huntress to ingest webhooks directly from Bitwarden.

• Vendor Information
• Configuration Checklist

Vendor Information

You must be an Account Administrator in Huntress in order to follow the steps below.

1. Create Token in your Huntress portal
   • Open Huntress Portal
   • Click SIEM on the left navigation menu
   • Click Source Management
   • Click Add Source
   • Click BitWarden
   • Click Add
     • Select "I am using Bitwarden's Cloud Hosting"
     • Click Next

   • Complete the source details and save

     

     • Provide a name for the integration and an optional description
     • Click Save

   • Copy the HTTP Event Collector Token value

     

2. Configure Integration in Bitwarden
   • Follow the guide published by Bitwarden here to complete the integration, using https://hec.huntress.io/services/collector as the HTTP Event Collector URL