Okta New Admin Console Behaviours

Rule Info

Name
Okta New Admin Console Behaviours
Author
kelnage
Description
Detects when Okta identifies new activity in the Admin Console.
Reference
https://developer.okta.com/docs/reference/api/system-log/
Date
2023-09-07 00:00:00
Modified
2024-06-26 00:00:00
Id
a0b38b70-3cb5-484b-a4eb-c4d8e7bcc0a9
Tags
attack.initial-access attack.t1078.004
Type
Community Rule
Link to Public Repo
https://github.com/SigmaHQ/sigma/search?q=a0b38b70-3cb5-484b-a4eb-c4d8e7bcc0a9

Rule History

Author
Title
Date
Commit
Nasreddine Bencherchali
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12
598d29f81
Nick Moore
Merge PR #4890 from @kelnage - Update New Behaviours Okta Admin Console rule
2024-06-26
71867434d
z00t
Merge PR #4509 from @faisalusuf - Add New Rules Related to Okta Breach
2023-10-28
284730b96
Nick Moore
Merge PR #4428 from @kelnage - Add Okta Cross-Tenant Impersonation Rules
2023-09-11
a6c20d8b7
THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022