| splunk |
PingID New MFA Method After Credential Reset |
production |
2026-09-29 |
| elastic |
Anthropic Magic Link Second Factor Disabled |
production |
2026-09-25 |
| elastic |
AWS IAM Deactivation of MFA Device |
production |
2026-09-18 |
| elastic |
AWS IAM Virtual MFA Device Registration Attempt with Session Token |
production |
2026-09-18 |
| elastic |
AWS STS AssumeRole with New MFA Device |
production |
2026-09-18 |
| elastic |
Entra ID User Sign-in with Unusual Authentication Type |
production |
2026-09-18 |
| elastic |
Entra ID MFA Disabled for User |
production |
2026-09-18 |
| elastic |
Google Workspace MFA Enforcement Disabled For Organization |
production |
2026-09-18 |
| elastic |
Attempt to Deactivate an Okta Policy |
production |
2026-09-18 |
| elastic |
Attempt to Delete an Okta Policy |
production |
2026-09-18 |
| elastic |
Attempt to Reset MFA Factors for an Okta User Account |
production |
2026-09-18 |
| elastic |
MFA Deactivation with no Re-Activation for Okta User Account |
production |
2026-09-18 |
| elastic |
Stolen Credentials Used to Login to Okta Account After MFA Reset |
production |
2026-09-18 |
| splunk |
GCP Multi-Factor Authentication Disabled |
production |
2026-05-13 |
| splunk |
AWS New MFA Method Registered For User |
production |
2026-05-13 |
| splunk |
Azure AD Multi-Factor Authentication Disabled |
production |
2026-05-13 |
| splunk |
Azure AD New MFA Method Registered For User |
production |
2026-05-13 |
| splunk |
Okta Multi-Factor Authentication Disabled |
production |
2026-05-13 |
| splunk |
PingID Mismatch Auth Source and Verification Response |
production |
2026-05-13 |
| splunk |
PingID New MFA Method Registered For User |
production |
2026-05-13 |
| splunk |
ASL AWS Multi-Factor Authentication Disabled |
production |
2026-05-13 |
| splunk |
ASL AWS New MFA Method Registered For User |
production |
2026-05-13 |
| splunk |
AWS Multi-Factor Authentication Disabled |
production |
2026-05-13 |
| sigma |
Okta MFA Reset or Deactivated |
test |
2026-04-27 |
| sigma |
Disabling Multi Factor Authentication |
test |
2023-09-18 |
| sigma |
Azure AD Only Single Factor Authentication Required |
test |
2022-07-27 |