Failed Logins from Unknown or Invalid User

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


This query searches for numerous login attempts to the management console with an unknown or invalid user name.

Attribute Value
Type Analytic Rule
Solution Okta Single Sign-On
ID 884be6e7-e568-418e-9c12-89229865ffde
Severity Medium
Status Available
Kind Scheduled
Tactics CredentialAccess
Techniques T1110
Required Connectors OktaSSO, OktaSSOv2
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
OktaV2_CL ? ?
Okta_CL 🔶 ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Okta Single Sign-On