security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
f91e0faceaa41d83bbda4a8a7063864171d7de68
sigma-rules/rules/okta
T
History
Austin Songer fcd29373d5 [Rule Tuning] High Number of Okta User Password Reset or Unlock Attempts (#1200) 
* Update impact_iam_deactivate_mfa_device.toml
Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com>
Co-authored-by: David French <56409778+threat-punter@users.noreply.github.com>

(cherry picked from commit 58ea49b092)
2021-05-14 20:05:56 +00:00
..
attempt_to_deactivate_okta_network_zone.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
attempt_to_delete_okta_network_zone.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
credential_access_attempted_bypass_of_okta_mfa.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
credential_access_attempts_to_brute_force_okta_user_account.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
credential_access_okta_brute_force_or_password_spraying.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
defense_evasion_suspicious_okta_user_password_reset_or_unlock_attempts.toml
[Rule Tuning] High Number of Okta User Password Reset or Unlock Attempts (#1200)
2021-05-14 20:05:56 +00:00
impact_attempt_to_revoke_okta_api_token.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
impact_possible_okta_dos_attack.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
initial_access_suspicious_activity_reported_by_okta_user.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
okta_attempt_to_deactivate_okta_application.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
okta_attempt_to_deactivate_okta_policy_rule.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
okta_attempt_to_deactivate_okta_policy.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
okta_attempt_to_delete_okta_application.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
okta_attempt_to_delete_okta_policy_rule.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
okta_attempt_to_delete_okta_policy.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
okta_attempt_to_modify_okta_application.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
okta_attempt_to_modify_okta_network_zone.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
okta_attempt_to_modify_okta_policy_rule.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
okta_attempt_to_modify_okta_policy.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
okta_attempt_to_modify_or_delete_application_sign_on_policy.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
okta_threat_detected_by_okta_threatinsight.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
persistence_administrator_privileges_assigned_to_okta_group.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
persistence_administrator_role_assigned_to_okta_user.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
persistence_attempt_to_create_okta_api_token.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
persistence_attempt_to_deactivate_mfa_for_okta_user_account.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00
persistence_attempt_to_reset_mfa_factors_for_okta_user_account.toml
Cleanup note field in rules (#1194)
2021-05-10 21:41:23 +00:00