Platform / product

onelogin Sigma detection rules

2 community-maintained Sigma detection rules in the library target the onelogin platform. Browse by severity, inspect the detection logic and MITRE ATT&CK mapping, and open the original Sigma YAML before using a rule in your detection engineering workflow.

2 rules

Severity

low2

OneLogin User Account Locked
low
Detects when an user account is locked or suspended.
onelogin · onelogin.events
OneLogin User Assumed Another User
low
Detects when an user assumed another user account.
onelogin · onelogin.events

Severity

OneLogin User Account Locked

OneLogin User Assumed Another User