LoFP LoFP / okta policies being modified or deleted may be performed by a system administrator.

Techniques

Sample rules

Okta Policy Modified or Deleted

Description

Detects when an Okta policy is modified or deleted.

Detection logic

condition: selection
selection:
  eventtype:
  - policy.lifecycle.update
  - policy.lifecycle.delete