Okta's Blog post

https://www.okta.com/blog/2022/03/updated-okta-statement-on-lapsus/

Cloudflare's blog post

https://blog.cloudflare.com/cloudflare-investigation-of-the-january-2022-okta-compromise/

Okta events of interest

https://github.com/eshlomo1/Microsoft-Sentinel-4-SecOps/blob/master/OKTA/Security-Events/Okta-Security-Event.md

Mitiga's Guide

https://www.mitiga.io/blog/all-the-information-you-need-to-know-to-understand-your-okta-logs-today

Rules

https://github.com/SigmaHQ/sigma/tree/master/rules/cloud/okta

https://github.com/elastic/detection-rules/tree/main/rules/integrations/okta