[SALESFORCE] Failed Identity Verification Event Detected

alert any $HOME_NET any -> $HOME_NET any (msg:"[SALESFORCE] Failed Identity Verification Event Detected"; program:salesforce_streaming_api_data; json_content:".channel","/event/IdentityVerificationEvent"; json_meta_content:!".data.payload.Status",AutomatedSuccess,InProgress,Initiated,Succeeded; json_meta_nocase; classtype:system-event; reference:url,https://developer.salesforce.com/docs/atlas.en-us.platform_events.meta/platform_events/platform_events_objects_monitoring.htm; sid:5014041; rev:1;)