
detection. I brought that up originally. The system import group create event in Okta. Um there are similar groups in uh Microsoft and in Google and the other IDPs. Uh watch for new groups being created via an import. And then for us, we have a as a very basic alert where I have a list of our 100, you know, critical groups. And if anybody creates a group that's named that, it fires an alert. And it's that's all it is. It was I thought about ways to do it high-tech, but it was a lot easier just make a big or statement. Um it works.