Detect Okta System Log events for identity and access anomalies.
npx skills add https://github.com/OpenTideHQ/AgentTide --skill okta-identity
Please help me install this Agent Skill. Skill: okta-identity Source: https://github.com/OpenTideHQ/AgentTide/tree/main/skills/okta-identity Command: npx skills add https://github.com/OpenTideHQ/AgentTide --skill okta-identity
This skill covers Okta System Log event-based detection authoring to identify identity and access anomalies, threats, and abuse signals within SIEM workflows.
Author detection content for Okta System Log events to identify authentication anomalies, MFA abuse, federation abuse, and admin actions.
High-intent search queries and answers about installing and using this skill.
Detect Okta identity threats by authoring SIEM detections against Okta System Log events. This skill provides event taxonomy and threat signal guidance to identify authentication anomalies, MFA abuse, and federation attacks.
Monitor Okta System Log events for admin action anomalies using the provided eventType taxonomy. The skill guides detection authoring for admin actions, OAuth app abuse, and cross-tenant impersonation patterns.
ThreatInsight integrates with Okta System Log detection rules by providing structured threat signals and common attack patterns. The skill maps these signals to event fields for robust authentication and federation abuse monitoring.
Yes, you can use this skill for Okta workflow and federation abuse detection. It provides specific detection patterns to monitor Okta deployments for anomalous access and identity threats within SIEM workflows.
No, you do not need prior Okta eventType taxonomy knowledge to author detection rules. The skill provides the necessary system log structure guidance and taxonomy to author robust detections from the ground up.
The best way to structure SIEM detections for Okta authentication anomalies is using the skill's structured fields and eventType taxonomy. It guides mapping ThreatInsight signals to log events for accurate identity threat detection.
tekgruntConfigure and troubleshoot LimaCharlie adapters for telemetry ingestion.
allanninalApply Sigma detection rules to investigate security incidents.
balsm-healthDetect security threats in Kubernetes audit logs by parsing JSON lines.
d-padmanabhanHarden Okta Workforce Identity SSO, SCIM, and IdP migration workflows.
