Okta Session Impersonation Grant
Detects events in Okta where there is the eventType of "user.session.impersonation.grant". This grants access in the context of the user. This could be high privilege admin access.
Sigma

Detects events in Okta where there is the eventType of "user.session.impersonation.grant". This grants access in the context of the user. This could be high privilege admin access.

Already have an account?