Detect Port Security Violation

Hardware Additions, Network Denial of Service, Adversary-in-the-Middle, ARP Cache Poisoning

Okta ThreatInsight Suspected PasswordSpray Attack

Valid Accounts, Default Accounts, Password Spraying

Monitor DNS For Brand Abuse

Detect DNS requests to Phishing Sites leveraging EvilGinx2

Spearphishing via Service

EC2 Instance Started With Previously Unseen User

Cloud Accounts