Elastic low stable eql

Spike in User Lifecycle Management Change Events

A machine learning job has identified an unusual spike in Okta user lifecycle management change events, indicating potential privileged access activity. Threat actors may manipulate user accounts to gain higher access rights or persist within the environment.

View Source

Detection Logic

Field Validations

Loading…

Comments (0)

Loading comments...