Invictus Incident Response Profile picture
Helping organizations respond to cyber incidents #stayInvictus | 🆘 24/7 Incident Response support via https://t.co/mdSF9jrVxC
Mar 22, 2022 21 tweets 7 min read
A thread on the (suspected) Okta compromise from an incident response perspective 🧵

#okta #LAPSUS$ #dfir #incidentresponse 1. Collect and preserve all Okta logs, focus on the Okta System Log as it's the main audit trail for Okta activities
Need more info on this log check (developer.okta.com/docs/reference…)