Skip to content

Snowplow Tracker Token

Service Name: Snowplow Analytics

Service Description: Snowplow is an open-source analytics platform that enables businesses to collect, store, and analyze event data from multiple sources. It provides detailed behavioral data collection for advanced analytics and data-driven decision-making.

Service Address: https://snowplowanalytics.com/

Validation Type: API Auth

IP Allow list: IP restrictions can be configured at the collector level through network security rules.

Secret Access Scope: Grants access to send tracking events to Snowplow collectors and potentially access to analytics data depending on implementation.

Secret Revokement URL: https://console.snowplowanalytics.com/ (via your Snowplow BDP account management)

Secret Example: sp_1a2b3c4d5e6f7g8h9i0j

Suspicious Activity Investigation Instructions:

  • Review Snowplow collector logs for unusual event volumes or patterns
  • Check for unexpected tracking events or data collection from unauthorized domains
  • Monitor for unusual data access patterns or export requests
  • Examine IP addresses sending tracking data to identify potential unauthorized sources
  • Review pipeline processing statistics for anomalies in data volume or processing

Mitigation Instructions:

  • Rotate the tracker token by generating a new one in your Snowplow console
  • Update the token in all legitimate applications using the tracker
  • Implement proper domain and referrer restrictions on your Snowplow collectors
  • Consider implementing additional authentication mechanisms for sensitive tracking endpoints
  • Review and update access controls for your Snowplow pipeline and data storage
  • Implement proper monitoring and alerting for unusual tracking activity