LoFP LoFP / legitimate and authorized user creation

Techniques

Sample rules

New Okta User Created

Description

Detects new user account creation

Detection logic

condition: selection
selection:
  eventtype: user.lifecycle.create