Okta Admin Role Assignment Created

Rule Info

Name

Okta Admin Role Assignment Created

Description

Detects when a new admin role assignment is created. Which could be a sign of privilege escalation or persistence

Reference

https://developer.okta.com/docs/reference/api/system-log/

Modified

None

Date

2023-01-19 00:00:00

Author

Nikita Khalimonenkov

Rule History

Author

Commit

Title

Date

nikitah4x

8015b445f

Update okta_admin_role_assignment_created.yml

2023-01-20

nikitah4x

411b1a44e

Update rules/cloud/okta/okta_admin_role_assignment_created.yml

2023-01-20

nikitah4x

a25fdddb0

Update rules/cloud/okta/okta_admin_role_assignment_created.yml

2023-01-20

nikitah4x

44a3371d8

Update rules/cloud/okta/okta_admin_role_assignment_created.yml

2023-01-20

nikitah4x

13a26aaff

Create okta_admin_role_assignment_created.yml

2023-01-19

TheLawsOfChaos

52e40d10e

feat: updates multiple mitre tech/sub-tech/tactics (#3913)

2023-01-12

frack113

931fb3085

old experimental rule promotion

2022-10-09

frack113

6e4944e47

Add okta product

2021-11-14

Austin Songer

6401f9b4d

Update okta_api_token_created.yml

2021-09-22

Austin Songer

1a64dc03a

Update okta_api_token_created.yml

2021-09-22

Austin Songer

8e1f36ec3

Update okta_api_token_created.yml

2021-09-12

Austin Songer

aa8978e9d

Update okta_api_token_created.yml

2021-09-12

Austin Songer

329c5e96f

Create okta_api_token_created.yml

2021-09-12

Austin Songer

30823b72b

Update okta_policy_rule_modified_or_deleted.yml

2021-09-12

Austin Songer

76d78c274

Create okta_policy_rule_modified_or_deleted.yml

2021-09-12