[Meta] Okta Detection Coverage for Cross-Origin Authentication Credential Stuffing

[terrancedejesus]

Parent Epic (If Applicable)

• https://github.com/elastic/ia-trade-team/issues/271

Meta Summary

This meta will serve to review detection coverage and capability for Cross-Origin authentication credential stuffing in Okta. The outcome is to have coverage for this attack technique within the security solution related to the Okta integration data source. Additionally, threat hunting queries may be created as well.

Estimated Time to Complete

1 week

Potential Blockers

• Data Visibility

Tasklist

Meta Tasks

Beta Give feedback

1. TBD

Resources / References

• https://sec.okta.com/articles/2024/05/detecting-cross-origin-authentication-credential-stuffing-attacks