Dope Security

Dope Security is an endpoint protection platform that provides network security, file activity monitoring, and threat detection. Dope Security logs capture endpoint events including network traffic, file operations, process executions, and security policy violations. These logs help monitor endpoint security, detect threats, and investigate security incidents.

Ingest Methods

RunReveal offers the following ways to ingest Dope Security logs:

• AWS S3 Bucket
• AWS S3 Bucket with Custom SQS
• Webhook

arn:aws:sns:<REGION>:253602268883:runreveal_dope_security

Webhook

Dope Security can send logs directly to RunReveal via webhook using the Dope Security Webhook source type.

Step 1: Create Webhook Source in RunReveal

1. Go to Sources in RunReveal
2. Click the Dope Security Webhook source tile
3. Give it a descriptive name (e.g., “Dope Security Webhook”)
4. Optionally enable bearer token authentication for added security
5. Click Connect Source to generate a unique webhook URL
6. Copy the generated webhook URL and bearer token (if enabled)

Step 2: Configure Dope Security

1. Log into your Dope Security console
2. Navigate to integrations or webhook settings
3. Add a new webhook destination
4. Configure the webhook:
   • URL: Paste the RunReveal webhook URL you copied
   • Method: POST
   • Content-Type: application/json
   • Authorization: If you enabled bearer token, add Authorization: Bearer YOUR_TOKEN header
5. Save the webhook configuration

Schema

The following columns are exposed for this source. RunReveal applies schema normalization across all sources, ensuring uniform field names and data types for cross-source queries and reusable detection logic.

Helpful Links

• Dope Security