Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

adds Okta Password Access detection and list iterate global helper #509

Merged
merged 3 commits into from
Sep 23, 2022

Conversation

cpascale43
Copy link
Contributor

@cpascale43 cpascale43 commented Sep 22, 2022

Background

Parity with OneLogin.PasswordAccess for ODIN detections

Changes

  • Adds okta_password_accessed.py and okta_password_accessed.yml
  • Adds get_val_from_list() method to panther_base_helpers.py

Testing

  • pat, linting tests pass

@cpascale43 cpascale43 requested review from a team September 22, 2022 20:14
@cpascale43 cpascale43 enabled auto-merge (squash) September 22, 2022 23:30
@cpascale43 cpascale43 requested review from a team and edyesed September 23, 2022 13:21
Copy link
Contributor

@edyesed edyesed left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This adds a detection for if somebody accesses a user's application password in okta, and alerts if the person doing the accessing isn't the owner of the password.

I like these test cases a great deal 👍

@cpascale43 cpascale43 merged commit e155ff0 into master Sep 23, 2022
@cpascale43 cpascale43 deleted the carrie-okta-detections branch September 23, 2022 17:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants