Okta API Token Created
This rule detects the creation of an API token within the Okta environment. API tokens can be used for programmatic access to Okta resources, and their creation, especially if unauthorized or unexpected, could indicate an attempt to establish persistence or gain unauthorized access to the identity provider.
Sigma
