Anvilogic high experimental other

Okta: Multiple OKTA push requests [snowflake-okta]

This use case looks for when a user has received multiple push requests for authentication via Okta.

View Source

Detection Logic

select * from okta where event_time > dateadd(hour, -2, sysdate()) and event_type ilike 'system.push.send_factor_verify_push'

Field Validations

Loading…

Comments (0)

Loading comments...