Detection rules › By catalog entry

Okta-zone

Catalog entry	Rules
zone.deactivate	2
zone.delete	2
zone.remove_blacklist	1
zone.update	1

zone.deactivate

2 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Okta Network Zone Deactivated or Deleted severity medium

Elastic (1)

Attempt to Deactivate an Okta Network Zone severity medium T1484,T1484.002,T1685,T1686.001

zone.delete

2 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Okta Network Zone Deactivated or Deleted severity medium

Elastic (1)

Attempt to Delete an Okta Network Zone severity medium T1685,T1686.001

zone.remove_blacklist

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

Attempt to Modify an Okta Network Zone severity medium T1484,T1685,T1686.001

zone.update

1 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

Attempt to Modify an Okta Network Zone severity medium T1484,T1685,T1686.001

Back to all Okta-zone catalog entries