David French 8f6eba8986 Tune metadata in Okta rules to align with the style of other rules (#491) ...

* rune-okta-rule-metadata

* update note field to include fleet integration info

* separate okta policy rule modification and deletion into two rules

* rename file to align with style of others

* fix syntax typo

* separate zone and policy deactivation, deletion, and modification actions into separate rules

* fix typo

* fix tpyo 🙃

* Use "detects" instead of "identifies" in description

* Use "detects" instead of "identifies" in description

* Use "detects" instead of "identifies" in description

* Use "detects" instead of "identifies" in description

2020-11-18 09:59:11 -07:00

..

attempt_to_deactivate_okta_network_zone.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

attempt_to_delete_okta_network_zone.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

credential_access_attempted_bypass_of_okta_mfa.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

credential_access_attempts_to_brute_force_okta_user_account.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

credential_access_okta_brute_force_or_password_spraying.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

defense_evasion_suspicious_okta_user_password_reset_or_unlock_attempts.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

impact_attempt_to_revoke_okta_api_token.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

impact_possible_okta_dos_attack.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

initial_access_suspicious_activity_reported_by_okta_user.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

okta_attempt_to_deactivate_okta_application.toml

Create okta_attempt_to_deactivate_okta_application.toml (#496)

2020-11-17 08:51:51 -07:00

okta_attempt_to_deactivate_okta_policy_rule.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

okta_attempt_to_deactivate_okta_policy.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

okta_attempt_to_delete_okta_application.toml

Create okta_attempt_to_delete_okta_application.toml (#497)

2020-11-17 08:53:59 -07:00

okta_attempt_to_delete_okta_policy_rule.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

okta_attempt_to_delete_okta_policy.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

okta_attempt_to_modify_okta_application.toml

[New Rule] Attempt to Modify an Okta Application (#495)

2020-11-17 08:49:02 -07:00

okta_attempt_to_modify_okta_network_zone.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

okta_attempt_to_modify_okta_policy_rule.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

okta_attempt_to_modify_okta_policy.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

okta_attempt_to_modify_or_delete_application_sign_on_policy.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

okta_threat_detected_by_okta_threatinsight.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

persistence_administrator_privileges_assigned_to_okta_group.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

persistence_administrator_role_assigned_to_okta_user.toml

[New Rule] Administrator Role Assigned to Okta User (#489)

2020-11-18 08:59:23 -07:00

persistence_attempt_to_create_okta_api_token.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

persistence_attempt_to_deactivate_mfa_for_okta_user_account.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00

persistence_attempt_to_reset_mfa_factors_for_okta_user_account.toml

Tune metadata in Okta rules to align with the style of other rules (#491)

2020-11-18 09:59:11 -07:00