Sandbox · Enterprise · Service provider
v0.1.0
by Huntbase
Identity Threats
Detect and hunt account takeover across Okta, Microsoft Entra ID and Google Workspace, the most common way attackers get in. Schedules detections for MFA fatigue, risky and impossible-travel sign-ins, OAuth consent grants, admin role grants, new application credentials, legacy authentication, suspicious Google logins and domain-wide delegation; checks for admins without MFA; switches on the identity correlation watchers; and brings Hub hunts for token theft, session hijacking, consent phishing and password spraying, with an Identity incident review report template.
What's inside
-
249 queries
-
3 detections
-
26 hunts
-
4 integrations
-
1 report template
Names, queries and logic are available in the platform once you sign up.
More packs
- AI Security · 126 queries
- ISO 27001 · 38 compliance checks
- NIS2 · 38 compliance checks
- SOC 2 · 37 compliance checks
- Cyber Essentials · 26 compliance checks
- All packs →