Okta Admin Role Assignment Created

Rule Info

Name
Okta Admin Role Assignment Created
Description
Detects when a new admin role assignment is created. Which could be a sign of privilege escalation or persistence
Modified
None
Date
2023-01-19 00:00:00
Author
Nikita Khalimonenkov
Tags
attack.persistence DEMO
Id
139bdd4b-9cd7-49ba-a2f4-744d0a8f5d8c
Type
Community Rule

Rule History

Author
Commit
Title
Date
nikitah4x
Update okta_admin_role_assignment_created.yml
2023-01-20
nikitah4x
Update rules/cloud/okta/okta_admin_role_assignment_created.yml
2023-01-20
nikitah4x
Update rules/cloud/okta/okta_admin_role_assignment_created.yml
2023-01-20
nikitah4x
Update rules/cloud/okta/okta_admin_role_assignment_created.yml
2023-01-20
nikitah4x
Create okta_admin_role_assignment_created.yml
2023-01-19
TheLawsOfChaos
feat: updates multiple mitre tech/sub-tech/tactics (#3913)
2023-01-12
frack113
old experimental rule promotion
2022-10-09
frack113
Add okta product
2021-11-14
Austin Songer
Update okta_api_token_created.yml
2021-09-22
Austin Songer
Update okta_api_token_created.yml
2021-09-22
Austin Songer
Update okta_api_token_created.yml
2021-09-12
Austin Songer
Update okta_api_token_created.yml
2021-09-12
Austin Songer
Create okta_api_token_created.yml
2021-09-12
Austin Songer
Update okta_policy_rule_modified_or_deleted.yml
2021-09-12
Austin Songer
Create okta_policy_rule_modified_or_deleted.yml
2021-09-12