added license field

terrancedejesus · terrancedejesus · commit 902bbb310439 · 2025-11-24T11:19:26.000-05:00
diff --git a/rules/integrations/okta/credential_access_multiple_user_agent_os_authentication.toml b/rules/integrations/okta/credential_access_multiple_user_agent_os_authentication.toml
@@ -21,6 +21,7 @@ false_positives = [
 from = "now-60m"
 index = ["logs-okta.system-*"]
 language = "kuery"
+license = "Elastic License v2"
 name = "Okta Multiple OS Names Detected for a Single DT Hash"
 note = """## Triage and analysis
 
