Elastic low stable kql

New Okta Authentication Behavior Detected

Detects events where Okta behavior detection has identified a new authentication behavior.

View Source

Detection Logic

event.dataset:okta.system and okta.debug_context.debug_data.risk_behaviors:*

Field Validations

Loading…

Comments (0)

Loading comments...