Update rules/integrations/okta/credential_access_multiple_user_agent_os_authentication.toml

terrancedejesus · web-flow · commit 3e5ea32d0b0d · 2025-10-22T10:40:18.000-04:00
diff --git a/rules/integrations/okta/credential_access_multiple_user_agent_os_authentication.toml b/rules/integrations/okta/credential_access_multiple_user_agent_os_authentication.toml
@@ -19,7 +19,6 @@ false_positives = [
 ]
 from = "now-60m"
 index = ["logs-okta.system-*"]
-interval = "5m"
 language = "kuery"
 name = "Okta Multiple OS Names Detected for a Single DT Hash"
 note = """## Triage and analysis

Original file line number	Diff line number	Diff line change
`@@ -19,7 +19,6 @@ false_positives = [`
`19`	`19`	`]`
`20`	`20`	`from = "now-60m"`
`21`	`21`	`index = ["logs-okta.system-*"]`
`22`		`-interval = "5m"`
`23`	`22`	`language = "kuery"`
`24`	`23`	`name = "Okta Multiple OS Names Detected for a Single DT Hash"`
`25`	`24`	`note = """## Triage and analysis`