Sunturai
Back to results
MediumMicrosoft Sentinel analytics

SAP ETD - Login from unexpected network

Identifies logons from an unexpected network. Source Action: Logon to the backend system from an IP address which is not assigned to one of the networks. networks can be maintained in the "SAP - Networks" watchlist…

Description

Identifies logons from an unexpected network. Source Action: Logon to the backend system from an IP address which is not assigned to one of the networks. networks can be maintained in the "SAP - Networks" watchlist of the Microsoft Sentinel Solution for SAP package. *Data Sources: SAP Enterprise Thread Detection Solution - Alerts*

Detection logic

Detection requirements

Log source product
sapetdalerts
Log source service
sapetdalerts_cl

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice