Analytics BIOC Low

Okta Reported Attack Suspected

Okta Threat Insight Reported Attack Suspected.

Module:
Identity Threat Detection (ITDR), SaaS Threat Detection
Licensed by:
Identity Threat Detection (ITDR)
Data source:
Okta Audit Log
ATT&CK tactics: Initial Access (TA0001)
ATT&CK techniques: Valid Accounts (T1078)
Detector tags: Okta Audit Analytics
Attacker's goals:

An attacker might attempt to compromise Okta accounts to gain access to sensitive assets or data.

Investigative actions:

Examine Okta alerts and search for signs of compromise to evaluate the potential risk.

Test period:
N/A (single event)
Deduplication:
1 Day