Okta Admin Role Assignment Created

Rule Info

Name

Okta Admin Role Assignment Created

Author

Nikita Khalimonenkov

Description

Detects when a new admin role assignment is created. Which could be a sign of privilege escalation or persistence

Reference

https://developer.okta.com/docs/reference/api/system-log/

Date

2023-01-19 00:00:00

Modified

None

139bdd4b-9cd7-49ba-a2f4-744d0a8f5d8c

Rule History

Author

Title

Date

Commit

Nasreddine Bencherchali

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12

598d29f81

github-actions[bot]

Merge PR #4611 from @nasbench - Promote Older Rules Status From `experimental` To `test`

2023-12-01

ae960f088

nikitah4x

Update okta_admin_role_assignment_created.yml

2023-01-20

8015b445f

nikitah4x

Update rules/cloud/okta/okta_admin_role_assignment_created.yml

2023-01-20

411b1a44e

nikitah4x

Update rules/cloud/okta/okta_admin_role_assignment_created.yml

2023-01-20

a25fdddb0

nikitah4x

Update rules/cloud/okta/okta_admin_role_assignment_created.yml

2023-01-20

44a3371d8

nikitah4x

Create okta_admin_role_assignment_created.yml

2023-01-19

13a26aaff

TheLawsOfChaos

feat: updates multiple mitre tech/sub-tech/tactics (#3913)

2023-01-12

52e40d10e

frack113

old experimental rule promotion

2022-10-09

931fb3085

frack113

Add okta product

2021-11-14

6e4944e47

Austin Songer

Update okta_api_token_created.yml

2021-09-22

6401f9b4d

Austin Songer

Update okta_api_token_created.yml

2021-09-22

1a64dc03a

Austin Songer

Update okta_api_token_created.yml

2021-09-12

8e1f36ec3

Austin Songer

Update okta_api_token_created.yml

2021-09-12

aa8978e9d

Austin Songer

Create okta_api_token_created.yml

2021-09-12

329c5e96f