Tag
medium
advisory
Okta End-User Reports Suspicious Account Activity
2 rules 1 TTPAn Okta end-user reports potentially suspicious activity on their account, indicating possible compromise or unauthorized access.
Okta
identity
suspicious-activity
2r
1t
medium
advisory
Entra ID User Reported Suspicious Activity
2 rules 2 TTPsThis rule detects suspicious activity reported by users in Microsoft Entra ID, indicating potential account compromise or unauthorized access attempts via social engineering during authentication.
Entra ID +1
entra-id
suspicious-activity
initial-access
credential-access
2r
2t