| splunk |
O365 Multiple Users Failing To Authenticate From Ip |
production |
2026-05-13 |
| splunk |
Okta Authentication Failed During MFA Challenge |
production |
2026-05-13 |
| splunk |
Okta Successful Single Factor Authentication |
production |
2026-05-13 |
| splunk |
Okta User Logins from Multiple Cities |
production |
2026-05-13 |
| splunk |
ASL AWS Credential Access GetPasswordData |
production |
2026-05-13 |
| splunk |
ASL AWS Credential Access RDS Password reset |
production |
2026-05-13 |
| splunk |
ASL AWS Multi-Factor Authentication Disabled |
production |
2026-05-13 |
| splunk |
AWS Console Login Failed During MFA Challenge |
production |
2026-05-13 |
| splunk |
AWS Credential Access Failed Login |
production |
2026-05-13 |
| splunk |
AWS Credential Access GetPasswordData |
production |
2026-05-13 |
| splunk |
AWS Credential Access RDS Password reset |
production |
2026-05-13 |
| splunk |
AWS Multi-Factor Authentication Disabled |
production |
2026-05-13 |
| splunk |
AWS Multiple Failed MFA Requests For User |
production |
2026-05-13 |
| splunk |
AWS Successful Single-Factor Authentication |
production |
2026-05-13 |
| splunk |
AWS Unusual Number of Failed Authentications From Ip |
production |
2026-05-13 |
| splunk |
Azure Active Directory High Risk Sign-in |
production |
2026-05-13 |
| splunk |
Azure AD Authentication Failed During MFA Challenge |
production |
2026-05-13 |
| splunk |
Azure AD Multi-Factor Authentication Disabled |
production |
2026-05-13 |
| splunk |
Azure AD Multi-Source Failed Authentications Spike |
production |
2026-05-13 |
| splunk |
Azure AD Multiple Failed MFA Requests For User |
production |
2026-05-13 |
| splunk |
Azure AD Multiple Users Failing To Authenticate From Ip |
production |
2026-05-13 |
| splunk |
Azure AD Successful PowerShell Authentication |
production |
2026-05-13 |
| splunk |
Azure AD Successful Single-Factor Authentication |
production |
2026-05-13 |
| splunk |
Azure AD Unusual Number of Failed Authentications From Ip |
production |
2026-05-13 |
| splunk |
Detect AWS Console Login by New User |
production |
2026-05-13 |
| splunk |
Detect AWS Console Login by User from New City |
production |
2026-05-13 |
| splunk |
Detect AWS Console Login by User from New Country |
production |
2026-05-13 |
| splunk |
Detect AWS Console Login by User from New Region |
production |
2026-05-13 |
| splunk |
GCP Authentication Failed During MFA Challenge |
production |
2026-05-13 |
| splunk |
GCP Multi-Factor Authentication Disabled |
production |
2026-05-13 |
| splunk |
GCP Multiple Failed MFA Requests For User |
production |
2026-05-13 |
| splunk |
GCP Multiple Users Failing To Authenticate From Ip |
production |
2026-05-13 |
| splunk |
GCP Successful Single-Factor Authentication |
production |
2026-05-13 |
| splunk |
GCP Unusual Number of Failed Authentications From Ip |
production |
2026-05-13 |
| splunk |
O365 Multi-Source Failed Authentications Spike |
production |
2026-05-13 |
| sigma |
Okta Suspicious Activity Reported by End-user |
test |
2026-04-27 |