{
  "_type": "https://in-toto.io/Statement/v1",
  "predicate": {
    "generated_at": "2026-04-24",
    "generator": {
      "corpus_version": "gold-rules@2026-04-24",
      "model": "n/a-static-corpus",
      "name": "cloudsigma",
      "prompt_version": "p1",
      "seed": 0,
      "version": "cloudsigma@v1.0-stub"
    },
    "input": {
      "enrichment": [],
      "id": "splunk-okta",
      "type": "sigma_matrix"
    },
    "publish_decision": {
      "embed_status": "experimental",
      "integrity_level": "L1"
    },
    "rule_metadata": {
      "corpus_path": "identity_provider/okta/T1078.004.yml",
      "level": "high",
      "status": "experimental",
      "title": "Okta Administrative Role or Privileged Group Assignment"
    }
  },
  "predicateType": "https://a13e.com/cloudsigma-rule-attestation/v1",
  "subject": [
    {
      "digest": {
        "sha256": "5b92f35b6778210deddaa370f5a7754bfd1af1bb20244a3320b8196b3b5a7435"
      },
      "name": "/library/sigma/splunk-okta/sigma-rule"
    }
  ]
}