Terrance DeJesus
0f5b5a3551
* adding investigation guides for Okta rules * Update rules/integrations/okta/credential_access_attempts_to_brute_force_okta_user_account.toml Co-authored-by: Isai <59296946+imays11@users.noreply.github.com> * Update rules/integrations/okta/defense_evasion_attempt_to_deactivate_okta_network_zone.toml Co-authored-by: Isai <59296946+imays11@users.noreply.github.com> * Update rules/integrations/okta/defense_evasion_attempt_to_delete_okta_network_zone.toml Co-authored-by: Isai <59296946+imays11@users.noreply.github.com> * Update rules/integrations/okta/defense_evasion_okta_attempt_to_deactivate_okta_policy.toml Co-authored-by: Isai <59296946+imays11@users.noreply.github.com> * Update rules/integrations/okta/defense_evasion_okta_attempt_to_deactivate_okta_policy_rule.toml Co-authored-by: Isai <59296946+imays11@users.noreply.github.com> * Update rules/integrations/okta/defense_evasion_okta_attempt_to_delete_okta_policy.toml Co-authored-by: Isai <59296946+imays11@users.noreply.github.com> * Update rules/integrations/okta/defense_evasion_okta_attempt_to_delete_okta_policy_rule.toml Co-authored-by: Isai <59296946+imays11@users.noreply.github.com> * Update rules/integrations/okta/defense_evasion_suspicious_okta_user_password_reset_or_unlock_attempts.toml Co-authored-by: Isai <59296946+imays11@users.noreply.github.com> * Update rules/integrations/okta/impact_okta_attempt_to_deactivate_okta_application.toml Co-authored-by: Isai <59296946+imays11@users.noreply.github.com> * added MFA to investigation guide for brute forcing --------- Co-authored-by: Isai <59296946+imays11@users.noreply.github.com> Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>