Background

Entro is a non-human identity and secret scanning platfrom. Entro has a new feature called Entro Scanner, that provides the possible for Entro users to scan data on the fly. This API generate logs that would be nice to have an integration that ingests them into Elasticsearch.

API Detail Requirements

• Hostname (<hostname>/v1/scan/auditLogs)
• API Key
• API Parameters
  • from: Date format dd/mm/yyyy
  • to: Date format dd/mm/yyyy
• Accept application/json
• Logo: https://entro.security/wp-content/uploads/2023/05/cropped-entro-fav-512.png

Proposed Integration User Input

• Hostname
• Interval (default 15m)
• API Key

Data Example

[
  {
    "request_id": "5ae363e4-0661-46cc-a56b-133b7fda1e9b",
    "secrets": [],
    "timestamp": 1741510628000,
    "date": "2025-03-09T08:57:08.000Z"
  },
  {
    "request_id": "b14b4819-e055-47bc-a4a5-2d6881211009",
    "secrets": [
      {
        "secret_type": "GITHUB_API_TOKEN",
        "exposed_value": "ghp_BT*******************ffv32CiUiw1R82UC7vz",
        "line_number": 1
      }
    ],
    "timestamp": 1741510053000,
    "date": "2025-03-09T08:47:33.000Z"
  }
]