Okta API Token Created or Enabled

Classification:

attack

Tactic:

Technique:

Set up the okta integration.

Goal

Detect when a new Okta API token is created.

This rule lets you monitor the following Okta event to detect when a new Okta API token is created:

Contact the user who created the API token and ensure that the API token is needed.