Skip to content

Added mfa-auth/definition.json for creating mfa-auth objects.#496

Open
ry-bar wants to merge 1 commit intoMISP:mainfrom
ry-bar:main
Open

Added mfa-auth/definition.json for creating mfa-auth objects.#496
ry-bar wants to merge 1 commit intoMISP:mainfrom
ry-bar:main

Conversation

@ry-bar
Copy link
Copy Markdown

@ry-bar ry-bar commented Apr 7, 2026

Adds a new object, mfa-auth-event, to represent multi-factor authentication (MFA) events such as fraud reports and suspicious login activity.

MFA-related events are commonly investigated but are not well represented by existing objects. This object provides a way to capture authentication context, network data, device details, and analyst outcomes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant