Island Enterprise Browser Log Monitoring

Integration Overview

Island is an Enterprise Browser that gives organizations complete control, visibility, and governance over browser activity, with security policies embedded directly where users, applications, and data intersect. Island exports three types of logs — audit events, browser activity, and system events — capturing everything from DLP violations and file downloads to administrative changes and device enrollment. Panther ingests these logs via S3, normalizing and storing them in a Snowflake-powered security data lake for unified detection and investigation.

Use Cases for Island Logs

Common SIEM use cases for Island logs include:

• Detecting DLP violations and security threats surfaced during browser activity

• Monitoring administrative actions and authentication events in the Island Management Console

• Tracking device enrollment, lifecycle changes, and system health events across your managed fleet

Onboarding Island Logs in Panther

Panther's integration for Island is easy to configure, allowing you to onboard your log data in just a few minutes. Island exports audit, browser audit, and system event logs to an S3 bucket in your AWS account, which Panther ingests using its S3 data transport. An active Island Enterprise Browser subscription with administrative access is required.

For more detailed steps on onboarding Island or for supported log schema, you can view our Island documentation here.