Anomalous Token Detection

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•25

This rule detects anomalous token characteristics, such as an unusual token lifetime or a token being used from an unfamiliar location. This indicates potential compromise or misuse of identity tokens.