Panther critical experimental python

Okta Login Without Push

Identifies successful Okta logins not followed by Push Security authorization within 60 minutes. Push Security provides additional identity verification beyond Okta MFA as a defense-in-depth strategy. Missing Push Security verification suggests compromised credentials, session hijacking, or MFA bypass where attackers satisfied Okta authentication but cannot complete additional verification.

View Source

Detection Logic

[object Object]

Field Validations

Loading…

Comments (0)

Loading comments...