Thread Reader
Share this page!
×
Post
Share
Email
Enter URL or ID to Unroll
×
Unroll Thread
You can paste full URL like: https://x.com/threadreaderapp/status/1644127596119195649
or just the ID like: 1644127596119195649
How to get URL link on X (Twitter) App
On the Twitter thread, click on
or
icon on the bottom
Click again on
or
Share Via icon
Click on
Copy Link to Tweet
Paste it above and click "Unroll Thread"!
More info at
Twitter Help
Invictus Incident Response
@InvictusIR
Helping organizations respond to cyber incidents #stayInvictus | 🆘 24/7 Incident Response support via https://t.co/mdSF9jrVxC
Subscribe
Save as PDF
Mar 22, 2022
•
21 tweets
•
7 min read
A thread on the (suspected) Okta compromise from an incident response perspective 🧵
#okta
#LAPSUS
$
#dfir
#incidentresponse
1.
Collect and preserve all Okta logs, focus on the Okta System Log as it's the main audit trail for Okta activities
Need more info on this log check (
developer.okta.com/docs/reference…
)