Update User Session Impersonation(Okta).yaml

changed the mitre tech and id

Solutions/Okta Single Sign-On/Analytic Rules/User Session Impersonation(Okta).yaml

@@ -16,10 +16,9 @@ queryPeriod: 6h
 triggerOperator: gt
 triggerThreshold: 0
 tactics:
-  - PrivilegeEscalation
+  - DefenseEvasion
 relevantTechniques:
-  - T1134
-  - T1134.003
+  - T1656
 query: |
   Okta_CL
   | where eventType_s == "user.session.impersonation.initiate" and outcome_result_s == "SUCCESS"