update yaml

datasets/attack_techniques/T1556/okta_idp/okta_idp.yml

@@ -4,10 +4,8 @@ date: '2024-03-05'
 description: 'Manually generated multple IDP changes in the OKTA tenant'
 environment: Okta Tenant
 dataset:
-- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1621/okta_mfa_login_failed/okta_mfa_login_failed.json
+- https://media.githubusercontent.com/media/splunk/attack_data/master/datasets/attack_techniques/T1556/okta_idp/okta.json
 sourcetypes:
 - OktaIM2:log
 references:
-- https://attack.mitre.org/techniques/T1621/ 
-- https://attack.mitre.org/techniques/T1078/004/
-- https://arstechnica.com/information-technology/2022/03/lapsus-and-solar-winds-hackers-both-use-the-same-old-trick-to-bypass-mfa/
+- https://attack.mitre.org/techniques/T1556/