Skip to content

Papertrail API Token

Service Name: Papertrail

Service Description: Papertrail is a cloud-hosted log management service that provides real-time log aggregation, searching, and analysis for applications, servers, and cloud services.

Service Address: https://www.papertrail.com/

Validation Type: API Auth

IP Allow list: IP restrictions can be configured at the account level through Papertrail's access management settings.

Secret Access Scope: Grants programmatic access to Papertrail's API, allowing management of log destinations, searching logs, retrieving event counts, and managing system configurations.

Secret Revokement URL: https://papertrailapp.com/account/profile

Secret Example: abcdef1234567890abcdef1234567890

Suspicious Activity Investigation Instructions:

  • Review API access logs in your Papertrail account for unusual activity.
  • Check for unauthorized log searches or configuration changes.
  • Monitor for unexpected changes to log destinations or system configurations.
  • Review any exports or downloads of log data that may be unusual.
  • Check for API calls from unfamiliar IP addresses or locations.

Mitigation Instructions:

  • Log in to your Papertrail account at https://papertrailapp.com/.
  • Navigate to your account profile settings.
  • Locate the API token section.
  • Click "Revoke" next to the compromised token.
  • Generate a new API token if needed.
  • Update any legitimate applications or services using the old token.
  • Review and update IP restrictions for API access if available.
  • Enable two-factor authentication for your Papertrail account if not already enabled.