Okta User Session Start Via An Anonymising Proxy Service — Detection Rule

Detects when an Okta user session starts where the user is behind an anonymising proxy service.

Read the full analysis on IntelFusions