CLOUD CONNECTOR

Dropbox Business

Dropbox is a file hosting service that offers cloud storage, file synchronization, personal cloud, and client software. 

Securonix integrates with the Dropbox API for account compromise, privilege escalation, data exfiltration, and suspicious account behavior events, as well as context enrichment for threat chains.

Event Service/Module Event Types Related Threats
Access /permission
Account Compromise, Unusual Login Location, Rare Geolocation
User Sign in, update policy, release policy
Account Compromise, Unusual Login Location, Rare Geolocation
Audit /report Team info, detailed logs, users, device, membership, usage, team logs Account Compromise, Unusual Login Location, Rare Geolocation
Files Access, modify, create, list, delete, rename, sync settings, Quota, linked Apps, revoke DLP, Data Exfiltration
Groups Create, del, get information, add/del members, update Privilege Escalation
Users Management Add/Del team members, team change notifications, Add/remove/move/change/suspend/unsuspend/ Privilege Escalation
Web App console Team change notifications Privilege Escalation
Folder Activate, archive, check, create, get info, list, continue, delete Privilege Escalation