security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
72fee8d16f732638ea635862efc7ec3e5687350e
sigma-rules/rules/okta
T
History
David French f11e9f8302 [New Rule] Administrator Role Assigned to Okta User (#489) 
* Create persistence_administrator_role_assigned_to_okta_user.toml

* set maturity to production

Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com>

* Reorder references to put the most relevant at the top

* tweak rule name

Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com>
2020-11-18 08:59:23 -07:00
..
credential_access_attempted_bypass_of_okta_mfa.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
credential_access_attempts_to_brute_force_okta_user_account.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
credential_access_okta_brute_force_or_password_spraying.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
defense_evasion_suspicious_okta_user_password_reset_or_unlock_attempts.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
impact_attempt_to_revoke_okta_api_token.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
impact_possible_okta_dos_attack.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
initial_access_suspicious_activity_reported_by_okta_user.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
okta_attempt_to_deactivate_okta_application.toml
Create okta_attempt_to_deactivate_okta_application.toml (#496)
2020-11-17 08:51:51 -07:00
okta_attempt_to_deactivate_okta_mfa_rule.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
okta_attempt_to_delete_okta_application.toml
Create okta_attempt_to_delete_okta_application.toml (#497)
2020-11-17 08:53:59 -07:00
okta_attempt_to_delete_okta_policy.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
okta_attempt_to_modify_okta_application.toml
[New Rule] Attempt to Modify an Okta Application (#495)
2020-11-17 08:49:02 -07:00
okta_attempt_to_modify_okta_mfa_rule.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
okta_attempt_to_modify_okta_network_zone.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
okta_attempt_to_modify_okta_policy.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
okta_attempt_to_modify_or_delete_application_sign_on_policy.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
okta_threat_detected_by_okta_threatinsight.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
persistence_administrator_privileges_assigned_to_okta_group.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
persistence_administrator_role_assigned_to_okta_user.toml
[New Rule] Administrator Role Assigned to Okta User (#489)
2020-11-18 08:59:23 -07:00
persistence_attempt_to_create_okta_api_token.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
persistence_attempt_to_deactivate_mfa_for_okta_user_account.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
persistence_attempt_to_deactivate_okta_policy.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00
persistence_attempt_to_reset_mfa_factors_for_okta_user_account.toml
[Rule Tuning] Tag Categorization Updates (#380)
2020-10-26 13:50:45 -05:00