Sigma informational test sigma

New Okta User Created

Detects new user account creation

View Source

Detection Logic

{
  "selection": {
    "eventType": "user.lifecycle.create"
  },
  "condition": "selection"
}

False Positives

  • ⚠ Legitimate and authorized user creation

Field Validations

Loading…

Comments (0)

Loading comments...