Steve Ross 32f4fe26ba [Bug] Duplicate tag on Okta rule (#3020) ...

* Fix double tag on rule

* fixed all rules; added unit test

---------

Co-authored-by: terrancedejesus <terrance.dejesus@elastic.co>
Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

(cherry picked from commit 4f33a40f48)

2023-08-21 14:49:38 +00:00

..

credential_access_attempted_bypass_of_okta_mfa.toml

[Bug] Duplicate tag on Okta rule (#3020)

2023-08-21 14:49:38 +00:00

credential_access_attempts_to_brute_force_okta_user_account.toml

[Bug] Duplicate tag on Okta rule (#3020)

2023-08-21 14:49:38 +00:00

credential_access_mfa_push_brute_force.toml

[Bug] Duplicate tag on Okta rule (#3020)

2023-08-21 14:49:38 +00:00

credential_access_okta_brute_force_or_password_spraying.toml

[Bug] Duplicate tag on Okta rule (#3020)

2023-08-21 14:49:38 +00:00

credential_access_user_impersonation_access.toml

[Bug] Duplicate tag on Okta rule (#3020)

2023-08-21 14:49:38 +00:00

defense_evasion_attempt_to_deactivate_okta_network_zone.toml

[Rule Tuning] Add Okta Investigation Guides Part 1 (#2899)

2023-07-17 11:47:02 -04:00

defense_evasion_attempt_to_delete_okta_network_zone.toml

[Rule Tuning] Add Okta Investigation Guides Part 1 (#2899)

2023-07-17 11:47:02 -04:00

defense_evasion_okta_attempt_to_deactivate_okta_policy_rule.toml

[Bug] Duplicate tag on Okta rule (#3020)

2023-08-21 14:49:38 +00:00

defense_evasion_okta_attempt_to_deactivate_okta_policy.toml

[Rule Tuning] Add Okta Investigation Guides Part 1 (#2899)

2023-07-17 11:47:02 -04:00

defense_evasion_okta_attempt_to_delete_okta_policy_rule.toml

[Rule Tuning] Add Okta Investigation Guides Part 1 (#2899)

2023-07-17 11:47:02 -04:00

defense_evasion_okta_attempt_to_delete_okta_policy.toml

[Rule Tuning] Add Okta Investigation Guides Part 1 (#2899)

2023-07-17 11:47:02 -04:00

defense_evasion_okta_attempt_to_modify_okta_network_zone.toml

[Rule Tuning] Add Okta Investigation Guides Part 1 (#2899)

2023-07-17 11:47:02 -04:00

defense_evasion_okta_attempt_to_modify_okta_policy_rule.toml

[Bug] Duplicate tag on Okta rule (#3020)

2023-08-21 14:49:38 +00:00

defense_evasion_okta_attempt_to_modify_okta_policy.toml

[Rule Tuning] Add Okta Investigation Guides Part 1 (#2899)

2023-07-17 11:47:02 -04:00

defense_evasion_suspicious_okta_user_password_reset_or_unlock_attempts.toml

[Bug] Duplicate tag on Okta rule (#3020)

2023-08-21 14:49:38 +00:00

impact_attempt_to_revoke_okta_api_token.toml

[Rule Tuning] Add Okta Investigation Guides Part 1 (#2899)

2023-07-17 11:47:02 -04:00

impact_okta_attempt_to_deactivate_okta_application.toml

[Rule Tuning] Add Okta Investigation Guides Part 1 (#2899)

2023-07-17 11:47:02 -04:00

impact_okta_attempt_to_delete_okta_application.toml

[Security Content] Tags Reform (#2725)

2023-06-22 18:38:56 -03:00

impact_okta_attempt_to_modify_okta_application.toml

[Security Content] Tags Reform (#2725)

2023-06-22 18:38:56 -03:00

impact_possible_okta_dos_attack.toml

[Security Content] Tags Reform (#2725)

2023-06-22 18:38:56 -03:00

initial_access_okta_user_attempted_unauthorized_access.toml

[Bug] Duplicate tag on Okta rule (#3020)

2023-08-21 14:49:38 +00:00

initial_access_suspicious_activity_reported_by_okta_user.toml

[Security Content] Tags Reform (#2725)

2023-06-22 18:38:56 -03:00

okta_threatinsight_threat_suspected_promotion.toml

[Security Content] Tags Reform (#2725)

2023-06-22 18:38:56 -03:00

persistence_administrator_privileges_assigned_to_okta_group.toml

[Security Content] Tags Reform (#2725)

2023-06-22 18:38:56 -03:00

persistence_administrator_role_assigned_to_okta_user.toml

[Security Content] Tags Reform (#2725)

2023-06-22 18:38:56 -03:00

persistence_attempt_to_create_okta_api_token.toml

[Security Content] Tags Reform (#2725)

2023-06-22 18:38:56 -03:00

persistence_attempt_to_deactivate_mfa_for_okta_user_account.toml

[Bug] Duplicate tag on Okta rule (#3020)

2023-08-21 14:49:38 +00:00

persistence_attempt_to_reset_mfa_factors_for_okta_user_account.toml

[Bug] Duplicate tag on Okta rule (#3020)

2023-08-21 14:49:38 +00:00

persistence_okta_attempt_to_modify_or_delete_application_sign_on_policy.toml

[Bug] Duplicate tag on Okta rule (#3020)

2023-08-21 14:49:38 +00:00