Skip to content
Threat Feed
Subscribe

Tag

Identity_protection

3 briefs RSS
high advisory

Azure AD Sign-In with Unfamiliar Properties

This alert detects Azure AD sign-ins with properties unfamiliar to the user, indicating potential account compromise or unauthorized access.

Azure Active Directory azure identity_protection sign-in account_compromise risk_detection
2r 4t
high advisory

Multiple Entra ID Protection Alerts Indicate Potential Account Compromise

Multiple Microsoft Entra ID Protection alerts associated with a single user in a short timeframe may indicate an ongoing attack or compromised account, stemming from suspicious sign-in activity such as anomalous IP addresses or risky sign-ins.

Microsoft Entra ID cloud azure entra_id identity_protection
2r 3t
critical advisory

Entra ID Protection Admin Confirmed Compromise

An administrator's confirmation of a compromised user or sign-in in Microsoft Entra ID Protection signals a high-confidence account compromise requiring immediate investigation and remediation.

Microsoft Entra ID azure entra_id identity_protection compromised_account
3r 3t