ctrlINT What the industry said about every indicator, with the quote

elastic[.]comDomain

Reported by 1 independent source · first reported by Elastic Security Labs · last reported

Last reported 2 months ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “| User (identity provider) | user.email, then user.id, then user.name@domain, then user.name | user:[email redacted]@elastic[.]com@okta | Provider name: okta, entra_id, microsoft_365, active_directory |”

    Elastic Security LabsVendor
    How a team of entity maintainers monitors, connects and scores entities in Elastic Security

Indicators reported together

named in the same reports
Copy this indicator · defanged

Thanks — we review every report.

Report a wrong value
What is wrong with elastic[.]com here?
No account needed. We do not store your IP address.