admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update okta_mfa_exhaustion_hunt.yml

Browse Source
This commit is contained in:
Jose Enrique Hernandez
2022-10-28 12:52:41 -04:00
committed by GitHub
parent 01ecf54b1f
commit b97cb22b4c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/experimental/application/okta_mfa_exhaustion_hunt.yml
+1 -1
View File
@@ -2,7 +2,7 @@ name: Okta MFA Exhaustion Hunt
id: 97e2fe57-3740-402c-988a-76b64ce04b8d
version: 1
date: '2022-09-27'
author: Michael Haag, Splunk
author: Michael Haag, Marissa Bower Splunk
type: Hunting
datamodel: []
description: The following analytic identifies patterns within Okta data to determine the amount of successful and failed pushes. Based on that, eval statements determine a finding of whether this is suspicious or not. The events are within a window of time and may be tuned as needed.