Panther critical experimental python
Okta Login Without Push
Identifies successful Okta logins not followed by Push Security authorization within 60 minutes. Push Security provides additional identity verification beyond Okta MFA as a defense-in-depth strategy. Missing Push Security verification suggests compromised credentials, session hijacking, or MFA bypass where attackers satisfied Okta authentication but cannot complete additional verification.
Detection Logic
[object Object] Field Validations
Loading…
Comments (0)
Loading comments...