security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
bcec8a447992a8e49b421858ef8bf109f79006cf
sigma-rules/rules/integrations/okta
T
History
Justin Ibarra 46c2383e5b [New Rule] Okta User Session Impersonation (#1867) 
* [New Rule] Okta User Session Impersonation
Co-authored-by: Jonhnathan <jonhnathancesar@gmail.com>
2022-03-22 16:11:29 -08:00
..
attempt_to_deactivate_okta_network_zone.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
attempt_to_delete_okta_network_zone.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
credential_access_attempted_bypass_of_okta_mfa.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
credential_access_attempts_to_brute_force_okta_user_account.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
credential_access_mfa_push_brute_force.toml
[Security Content] Update rules based on docs review (#1803)
2022-03-01 21:39:30 -03:00
credential_access_okta_brute_force_or_password_spraying.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
credential_access_user_impersonation_access.toml
[New Rule] Okta User Session Impersonation (#1867)
2022-03-22 16:11:29 -08:00
defense_evasion_suspicious_okta_user_password_reset_or_unlock_attempts.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
impact_attempt_to_revoke_okta_api_token.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
impact_possible_okta_dos_attack.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
initial_access_okta_user_attempted_unauthorized_access.toml
[Rule tuning] Update rules based on docs review (#1663)
2022-01-28 10:41:22 -09:00
initial_access_suspicious_activity_reported_by_okta_user.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
okta_attempt_to_deactivate_okta_application.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
okta_attempt_to_deactivate_okta_policy_rule.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
okta_attempt_to_deactivate_okta_policy.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
okta_attempt_to_delete_okta_application.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
okta_attempt_to_delete_okta_policy_rule.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
okta_attempt_to_delete_okta_policy.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
okta_attempt_to_modify_okta_application.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
okta_attempt_to_modify_okta_network_zone.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
okta_attempt_to_modify_okta_policy_rule.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
okta_attempt_to_modify_okta_policy.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
okta_attempt_to_modify_or_delete_application_sign_on_policy.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
okta_threat_detected_by_okta_threatinsight.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
persistence_administrator_privileges_assigned_to_okta_group.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
persistence_administrator_role_assigned_to_okta_user.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
persistence_attempt_to_create_okta_api_token.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
persistence_attempt_to_deactivate_mfa_for_okta_user_account.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00
persistence_attempt_to_reset_mfa_factors_for_okta_user_account.toml
[Fleet] Track integrations in folder and metadata (#1372)
2021-07-21 15:24:56 -06:00