security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
88f752bf8bceacd5c8a9307c3ce80353af782c30
sigma-rules/rules/integrations/okta
T
History
Terrance DeJesus 832ee02aed [New Rule] Adding Detection Logic for Okta User Sessions Started from Different Geolocations (#3279) 
* new rule 'Okta User Sessions Started from Different Geolocations'

* Update rules/integrations/okta/initial_access_okta_user_sessions_started_from_different_geolocations.toml
2023-11-21 17:32:09 -05:00
..
credential_access_attempted_bypass_of_okta_mfa.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
credential_access_attempts_to_brute_force_okta_user_account.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
credential_access_mfa_push_brute_force.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
credential_access_okta_brute_force_or_password_spraying.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
credential_access_user_impersonation_access.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
defense_evasion_attempt_to_deactivate_okta_network_zone.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
defense_evasion_attempt_to_delete_okta_network_zone.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
defense_evasion_okta_attempt_to_deactivate_okta_policy_rule.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
defense_evasion_okta_attempt_to_deactivate_okta_policy.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
defense_evasion_okta_attempt_to_delete_okta_policy_rule.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
defense_evasion_okta_attempt_to_delete_okta_policy.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
defense_evasion_okta_attempt_to_modify_okta_network_zone.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
defense_evasion_okta_attempt_to_modify_okta_policy_rule.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
defense_evasion_okta_attempt_to_modify_okta_policy.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
defense_evasion_suspicious_okta_user_password_reset_or_unlock_attempts.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
impact_attempt_to_revoke_okta_api_token.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
impact_okta_attempt_to_deactivate_okta_application.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
impact_okta_attempt_to_delete_okta_application.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
impact_okta_attempt_to_modify_okta_application.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
impact_possible_okta_dos_attack.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
initial_access_okta_user_attempted_unauthorized_access.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
initial_access_okta_user_sessions_started_from_different_geolocations.toml
[New Rule] Adding Detection Logic for Okta User Sessions Started from Different Geolocations (#3279)
2023-11-21 17:32:09 -05:00
initial_access_suspicious_activity_reported_by_okta_user.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
okta_threatinsight_threat_suspected_promotion.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
persistence_administrator_privileges_assigned_to_okta_group.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
persistence_administrator_role_assigned_to_okta_user.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
persistence_attempt_to_create_okta_api_token.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
persistence_attempt_to_deactivate_mfa_for_okta_user_account.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
persistence_attempt_to_reset_mfa_factors_for_okta_user_account.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00
persistence_okta_attempt_to_modify_or_delete_application_sign_on_policy.toml
[Rule Tuning] Bump Minimum Stacks for AWS and Okta for Version Control (#3221)
2023-10-24 12:51:59 -04:00