OKTA OPEN-SOURCES CATALOG OF AUTH0 RULES FOR THREAT DETECTION

Summary from the TLDR InfoSec newsletter

Okta has open-sourced ready-made Sigma queries for Auth0 customers to detect account takeovers, misconfigurations, and suspicious behavior in event logs. Auth0 is an IAM platform used by organizations for login, authentication, and user management services. Organizations can utilize the rules by cloning the GitHub repo and using a Sigma converter (such as sigma-cli) to translate the rules into a query syntax that their SIEM supports.