Set up the auth0 integration.
Detect Account Take Over (ATO) through credential stuffing attack.
To determine a successful attempt: Detect a high number of failed logins from at least ten unique users and at least one successful login for a user. This generates a
HIGH severity signal.
To determine an unsuccessful attempt: Detect a high number of failed logins from at least ten unique users. This generates an
INFO severity signal.