Okta Admin Role Assignment Created

Rule Info

Name
Okta Admin Role Assignment Created
Author
Nikita Khalimonenkov
Description
Detects when a new admin role assignment is created. Which could be a sign of privilege escalation or persistence
Date
2023-01-19 00:00:00
Modified
None
Id
139bdd4b-9cd7-49ba-a2f4-744d0a8f5d8c
Tags
attack.persistence
Type
Community Rule

Rule History

Author
Title
Date
Commit
Nasreddine Bencherchali
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12
github-actions[bot]
Merge PR #4611 from @nasbench - Promote Older Rules Status From `experimental` To `test`
2023-12-01
nikitah4x
Update okta_admin_role_assignment_created.yml
2023-01-20
nikitah4x
Update rules/cloud/okta/okta_admin_role_assignment_created.yml
2023-01-20
nikitah4x
Update rules/cloud/okta/okta_admin_role_assignment_created.yml
2023-01-20
nikitah4x
Update rules/cloud/okta/okta_admin_role_assignment_created.yml
2023-01-20
nikitah4x
Create okta_admin_role_assignment_created.yml
2023-01-19
TheLawsOfChaos
feat: updates multiple mitre tech/sub-tech/tactics (#3913)
2023-01-12
frack113
old experimental rule promotion
2022-10-09
frack113
Add okta product
2021-11-14
Austin Songer
Update okta_api_token_created.yml
2021-09-22
Austin Songer
Update okta_api_token_created.yml
2021-09-22
Austin Songer
Update okta_api_token_created.yml
2021-09-12
Austin Songer
Update okta_api_token_created.yml
2021-09-12
Austin Songer
Create okta_api_token_created.yml
2021-09-12