Detecting OAuth Token Theft
Analyze OAuth sign-in telemetry for indicators of token theft including impossible travel, device fingerprint changes, and token replay attacks.
Detect OAuth access token theft and misuse by analyzing sign-in logs for impossible travel, new device patterns, token replay from unusual IPs, and anomalous scope requests via Microsoft Graph and Okta APIs.
npx skillmds@latest add autohandai-community-skills/detecting-oauth-token-theft Analyze OAuth sign-in telemetry for indicators of token theft including impossible travel, device fingerprint changes, and token replay attacks.
autohandai/community-skills/tree/main/detecting-oauth-token-theft commit e4ede3456a