Elastic low stable eql
Spike in User Lifecycle Management Change Events
A machine learning job has identified an unusual spike in Okta user lifecycle management change events, indicating potential privileged access activity. Threat actors may manipulate user accounts to gain higher access rights or persist within the environment.
Detection Logic
Field Validations
Loading…
Comments (0)
Loading comments...