SAML Token Issuer Anomaly

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•2

Indicates the SAML token issuer for the associated SAML token is potentially compromised. The claims included in the token are unusual or match known attacker patterns