11 published detections cite this
Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.
| Detection | Severity |
|---|---|
| O365 New Federated Domain Added | Medium |
| O365 Multiple Users Failing To Authenticate From Ip | Medium |
| O365 Multi-Source Failed Authentications Spike | Medium |
| O365 Added Service Principal | Medium |
| O365 Add App Role Assignment Grant User | Medium |
| High Number of Login Failures from a single source | Informational |
| Azure AD Unusual Number of Failed Authentications From Ip | Informational |
| Azure AD Multiple Users Failing To Authenticate From Ip | Informational |
| Azure AD Multi-Source Failed Authentications Spike | Medium |
| AWS SAML Update identity provider | Medium |
| ASL AWS SAML Update identity provider | Medium |
Showing 11 of 11