Okta Suspicious Activity Reported by End-user

Rule Info

Name
Okta Suspicious Activity Reported by End-user
Author
kelnage
Description
Detects when an Okta end-user reports activity by their account as being potentially suspicious.
Date
2023-09-07 00:00:00
Modified
None
Id
07e97cc6-aed1-43ae-9081-b3470d2367f1
Tags
attack.resource-development attack.t1586.003
Type
Community Rule

Rule History

Author
Title
Date
Commit
Nasreddine Bencherchali
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12
github-actions[bot]
Merge PR #4942 from @nasbench - promote older rules status from experimental to test
2024-08-01
Nick Moore
Merge PR #4428 from @kelnage - Add Okta Cross-Tenant Impersonation Rules
2023-09-11