Detection rules › By event

Okta-zone

Event	Rules
zone.deactivate	2
zone.delete	2
zone.remove_blacklist	1
zone.update	1

zone.deactivate

2 detection rules reference this event. View event page.

Sigma (1)

Okta Network Zone Deactivated or Deleted severity medium

Elastic (1)

Attempt to Deactivate an Okta Network Zone severity medium T1484, T1484.002, T1685, T1686.001

zone.delete

2 detection rules reference this event. View event page.

Sigma (1)

Okta Network Zone Deactivated or Deleted severity medium

Elastic (1)

Attempt to Delete an Okta Network Zone severity medium T1685, T1686.001

zone.remove_blacklist

1 detection rules reference this event. View event page.

Elastic (1)

Attempt to Modify an Okta Network Zone severity medium T1484, T1685, T1686.001

zone.update

1 detection rules reference this event. View event page.

Elastic (1)

Attempt to Modify an Okta Network Zone severity medium T1484, T1685, T1686.001