Skip to content
Threat Feed
Subscribe

Tag

High_risk_signin

1 brief RSS
high advisory

Entra ID High Risk Sign-in Detected

This rule detects high-risk sign-ins in Microsoft Entra ID, as identified by Identity Protection, where the sign-in is flagged with a risk level of `high` during the authentication process, indicating a strong likelihood of account compromise.

Microsoft Entra ID azure entra_id initial_access high_risk_signin
2r 1t