Tag
high
advisory
Azure Identity Protection Atypical Travel Anomaly
2 rules 1 TTPThe Atypical Travel detection in Azure Identity Protection identifies potentially compromised user accounts by detecting geographically improbable sign-in activity, indicative of account compromise or misuse.
Azure Active Directory +1
azure
identity-protection
atypical-travel
account-compromise
credential-theft
2r
1t
high
advisory
Impossible Travel Detection in Azure AD
2 rules 1 TTPThis brief describes the detection of 'impossible travel' events in Azure AD, where a user appears to log in from geographically distant locations within an implausibly short time frame, potentially indicating account compromise.
Azure Active Directory
azuread
identity-protection
impossible-travel
account-compromise
lateral-movement
2r
1t