DUO Admin

Details
Content
Dependencies
Version History

DUO for admins. Must have access to the admin api in order to use this

Duo Admin

This pack includes Cortex XSIAM content.

Duo Admin

This pack includes Cortex XSIAM content.

Integrations

Name	Description
DUO Admin	DUO for admins. Must have access to the admin api in order to use this.

Integrations

Name	Description
Duo Event Collector	Collects Auth and Audit events for Duo using the API.
DUO Admin	DUO for admins. Must have access to the admin api in order to use this.

Modeling Rules

Name	Description
Duo Modeling Rule
Duo 2.0 Modeling Rule

Pack Name	Pack By
Base	By: Cortex XSOAR

Pack Name	Pack By
Base	By: Cortex XSOAR

4.0.26 - 3257782 (April 28, 2025)

Integrations

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.3242986.

Related pull requests:
- 39725

Download

4.0.25 - 3042633 (April 2, 2025)

Integrations

DUO Admin

Metadata and documentation improvements.

Related pull requests:
- 39131

Download

4.0.24 - R2988527 (March 26, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 37732

Download

4.0.23 - R1681986 (November 21, 2024)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 37175

Download

4.0.22 - 1619437 (November 10, 2024)

Integrations

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.115493.

Related pull requests:
- 37118
- 37114

Download

4.0.21 - 1309186 (August 26, 2024)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 35588

Download

4.0.20 - 1230534 (July 31, 2024)

Integrations

DUO Admin

Fixed an issue where test failed on timeout.
Updated the Docker image to: demisto/vendors-sdk:1.0.0.103334.

Related pull requests:
- 35617

Download

4.0.19 - 1072918 (June 5, 2024)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 34734

Download

4.0.18 - R828628 (February 14, 2024)

Integrations

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.87491.

Related pull requests:
- 32894

Download

4.0.17 - 762016 (January 14, 2024)

Integrations

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.84790.

Related pull requests:
- 32187

Download

4.0.16 - 7232090 (December 21, 2023)

Integrations

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.83426.

Related pull requests:
- 31606

Download

4.0.14 - 6864790 (November 12, 2023)

Integrations

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.80194.

Related pull requests:
- 30818

Download

4.0.13 - 6721193 (October 27, 2023)

Integrations

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.79366.

Related pull requests:
- 30435

Download

4.0.12 - 6521786 (October 5, 2023)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 30014

Download

4.0.11 - 6453502 (September 28, 2023)

Integrations

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.74116.

Related pull requests:
- 29575

Download

4.0.10 - 6429983 (September 26, 2023)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 29139

Download

4.0.9 - 6259960 (September 7, 2023)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 29403

Download

4.0.8 - 6174567 (August 28, 2023)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 29244

Download

4.0.7 - 6170593 (August 28, 2023)

Integrations

DUO Admin

Updated the Docker image to: demisto/duoadmin3:1.0.0.72241.

Related pull requests:
- 29270

Download

4.0.6 - 6010750 (August 10, 2023)

Integrations

DUO Admin

Updated the Docker image to: demisto/duoadmin3:1.0.0.68923.

Related pull requests:
- 28881

Download

4.0.5 - 5862976 (July 25, 2023)

Integrations

DUO Admin

Updated the Docker image to: demisto/duoadmin3:1.0.0.65621.

Related pull requests:
- 28467

Download

4.0.4 - R5801668 (July 18, 2023)

Integrations

DUO Admin

Updated the Docker image to: demisto/duoadmin3:1.0.0.64379.

Related pull requests:
- 28020

Download

4.0.3 - R5692327 (July 5, 2023)

Integrations

DUO Admin

Updated the Docker image to: demisto/duoadmin3:1.0.0.63681.
Added the Secret Key and Integration Key integration parameters to support credentials fetching object.

Related pull requests:
- 27683

Download

4.0.2 - 5504705 (June 12, 2023)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 27308

Download

4.0.1 - 5465590 (June 7, 2023)

Integrations

DUO Admin

Updated the Docker image to: demisto/duoadmin3:1.0.0.61875.

Related pull requests:
- 27268

Download

4.0.0 - 5356324 (May 24, 2023)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 26241

Download

3.2.13 - 5226855 (May 9, 2023)

Integrations

DUO Admin

Fixed a library incompatibility by downgrading the Docker image to: demisto/duoadmin3:1.0.0.51401.

Related pull requests:
- 26405

Download

4.0.26 - 3257782 (April 28, 2025)

Integrations

Duo Event Collector

Updated the Docker image to: demisto/vendors-sdk:1.0.0.3242986.

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.3242986.

Related pull requests:
- 39725

Download

4.0.25 - 3042633 (April 2, 2025)

Integrations

Duo Event Collector

Metadata and documentation improvements.

DUO Admin

Metadata and documentation improvements.

Related pull requests:
- 39131

Download

4.0.24 - R2988527 (March 26, 2025)

Integrations

Duo Event Collector

Code functionality improvements.
Updated the Docker image to: demisto/vendors-sdk:1.0.0.1876031.

Related pull requests:
- 37732

Download

4.0.23 - R1681986 (November 21, 2024)

Integrations

Duo Event Collector

Added a threshold of 5 seconds between max and min time when querying duo API to improve functionality.

Related pull requests:
- 37175

Download

4.0.22 - 1621428 (November 11, 2024)

Integrations

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.115493.

Duo Event Collector

Updated the Docker image to: demisto/vendors-sdk:1.0.0.115493.

Related pull requests:
- 37118
- 37114

Download

4.0.21 - 1309186 (August 26, 2024)

Integrations

Duo Event Collector

Added the parameter End of the fetch window to allow an adjustment to the fetch window to handle the Duo eventing system not being a real-time system.
Added the following arguments to duo-get-events:
- logs_type_array
- after
- limit
Updated the Docker image to: demisto/vendors-sdk:1.0.0.108227.

Related pull requests:
- 35588

Download

4.0.20 - 1230534 (July 31, 2024)

Integrations

DUO Admin

Fixed an issue where test failed on timeout.
Updated the Docker image to: demisto/vendors-sdk:1.0.0.103334.

Related pull requests:
- 35617

Download

4.0.19 - 1072918 (June 5, 2024)

Integrations

Duo Event Collector

Fixed an issue where the should_push_events argument was not passed correctly to the duo-get-events command.
Updated the Docker image to: demisto/vendors-sdk:1.0.0.96124.

Related pull requests:
- 34734

Download

4.0.18 - R828628 (February 14, 2024)

Integrations

Duo Event Collector

Updated the Docker image to: demisto/vendors-sdk:1.0.0.87491.

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.87491.

Related pull requests:
- 32894

Download

4.0.17 - 762016 (January 14, 2024)

Integrations

Duo Event Collector

Updated the Docker image to: demisto/vendors-sdk:1.0.0.84790.

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.84790.

Related pull requests:
- 32187

Download

4.0.16 - 7232090 (December 21, 2023)

Integrations

Duo Event Collector

Updated the Docker image to: demisto/vendors-sdk:1.0.0.83426.

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.83426.

Modeling Rules

Duo 2.0 Modeling Rule

Updated the pack Modeling Rule to include additional fields.

Related pull requests:
- 31606

Download

4.0.14 - 6864790 (November 12, 2023)

Integrations

Duo Event Collector

Updated the Docker image to: demisto/vendors-sdk:1.0.0.80194.

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.80194.

Related pull requests:
- 30818

Download

4.0.13 - 6721193 (October 27, 2023)

Integrations

Duo Event Collector

Updated the Docker image to: demisto/vendors-sdk:1.0.0.79366.

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.79366.

Related pull requests:
- 30435

Download

4.0.12 - 6521786 (October 5, 2023)

Modeling Rules

Duo Modeling Rule

Updated the logic for Modeling Rule fields in schema.

Duo 2.0 Modeling Rule

Updated the logic for Modeling Rule fields in schema.

Related pull requests:
- 30014

Download

4.0.11 - 6453502 (September 28, 2023)

Integrations

Duo Event Collector

Updated the Docker image to: demisto/vendors-sdk:1.0.0.74116.

DUO Admin

Updated the Docker image to: demisto/vendors-sdk:1.0.0.74116.

Related pull requests:
- 29575

Download

4.0.10 - 6429983 (September 26, 2023)

Modeling Rules

New: Duo 2.0 Modeling Rule

Created a new Modeling Rule version (Available from Cortex XSIAM 2.0).

Duo Modeling Rule

Added out-of-the-box analytics for XDM identity data.
Cortex XSIAM enhances detection and investigations by enabling analytics to run on all mapped Cortex Data Model (XDM) identity data.
Modeling Rule fields were updated in order to support this enrichment (Available from Cortex XSIAM 2.0v).

Related pull requests:
- 29139

Download

4.0.9 - 6259960 (September 7, 2023)

Modeling Rules

Duo Modeling Rule

Removed duplicate keys from the schema.

Related pull requests:
- 29403

Download

4.0.8 - 6174567 (August 28, 2023)

Modeling Rules

Duo Modeling Rule

Updated the Modeling Rule schema with additional fields.

Related pull requests:
- 29244

Download

4.0.7 - 6170593 (August 28, 2023)

Integrations

Duo Event Collector

Updated the Docker image to: demisto/duoadmin3:1.0.0.72241.

DUO Admin

Updated the Docker image to: demisto/duoadmin3:1.0.0.72241.

Related pull requests:
- 29270

Download

4.0.6 - 6010750 (August 10, 2023)

Integrations

Duo Event Collector

Updated the Docker image to: demisto/duoadmin3:1.0.0.68923.

DUO Admin

Updated the Docker image to: demisto/duoadmin3:1.0.0.68923.

Related pull requests:
- 28881

Download

4.0.5 - 5862976 (July 25, 2023)

Integrations

Duo Event Collector

Updated the Docker image to: demisto/duoadmin3:1.0.0.65621.

DUO Admin

Updated the Docker image to: demisto/duoadmin3:1.0.0.65621.

Related pull requests:
- 28467

Download

4.0.4 - R5801668 (July 18, 2023)

Integrations

Duo Event Collector

Updated the Docker image to: demisto/duoadmin3:1.0.0.64379.

DUO Admin

Updated the Docker image to: demisto/duoadmin3:1.0.0.64379.

Related pull requests:
- 28020

Download

4.0.3 - R5692327 (July 5, 2023)

Integrations

DUO Admin

Updated the Docker image to: demisto/duoadmin3:1.0.0.63681.
Added the Secret Key and Integration Key integration parameters to support credentials fetching object.

Related pull requests:
- 27683

Download

4.0.2 - 5504705 (June 12, 2023)

Modeling Rules

Duo Modeling Rule

Updated the modeling rules for "administrator" and "authentication" events.
Added a modeling rule for "telephony" events.

Related pull requests:
- 27308

Download

4.0.1 - 5465590 (June 7, 2023)

Integrations

Duo Event Collector

Updated the Docker image to: demisto/duoadmin3:1.0.0.61875.

DUO Admin

Updated the Docker image to: demisto/duoadmin3:1.0.0.61875.

Related pull requests:
- 27268

Download

4.0.0 - R5356324 (May 24, 2023)

Integrations

Duo Event Collector

Fixed an issue with the test button that returned a false posite results.
Fixes an issue with fetch events that could result in missing logs.
Deprecated the auth_api_version parameter in order to use the newest available API version recommended by Duo.
Updated the Docker image to: demisto/duoadmin3:1.0.0.61106.

Related pull requests:
- 26241

Download

3.2.13 - 5226855 (May 9, 2023)

Integrations

DUO Admin

Fixed a library incompatibility by downgrading the Docker image to: demisto/duoadmin3:1.0.0.51401.

Duo Event Collector

Fixed a library incompatibility by downgrading the Docker image to: demisto/duoadmin3:1.0.0.54426.

Related pull requests:
- 26405

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	July 20, 2020
Last Release	April 28, 2025

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise.