diff --git a/rules/okta_rules.yaml b/rules/okta_rules.yaml index 07e02892..cc9679e3 100644 --- a/rules/okta_rules.yaml +++ b/rules/okta_rules.yaml @@ -167,7 +167,7 @@ - macro: user_known_countries condition: (okta.client.geo.country in (allowed_countries_list)) -- rule: Detecting unknwon logins using geolocation +- rule: Detecting unknown logins using geolocation desc: Detect a logins event based on user geolocation condition: okta.evt.type = "user.session.start" and not user_known_countries output: "A user logged in OKTA from a suspicious country (user=%okta.actor.name, ip=%okta.client.ip, country=%okta.client.geo.country)" diff --git a/userspace/engine/stats_manager.h b/userspace/engine/stats_manager.h index 8ad40811..a1308954 100644 --- a/userspace/engine/stats_manager.h +++ b/userspace/engine/stats_manager.h @@ -40,7 +40,7 @@ public: uint32_t index); /*! - \brief Formats the internal statistics into the out sring + \brief Formats the internal statistics into the out string */ virtual void format( const indexed_vector& rules,