Research

Cloud identity and token theft detection pack for Entra ID and Okta

Four Sigma rules for the cloud identity attacks that actually land: illicit consent grants, authentication methods added after a risky sign-in, help-desk MFA resets, and session tokens replayed from a second address.

Full write-up available to members subscribers. See what is included.