Redirecting you to Reddit in 5 seconds:
https://old.reddit.com/r/netsec/comments/187crdx/okta_threat_hunting_guide_part_2