Forum Discussion
Steph32UK
Oct 31, 2022Copper Contributor
Azure Sign-in Logs
Hi, I've been tracking some activity which I think is somewhat malicious. Within sign-in logs I've noticed quite a few failures from user accounts under application "Microsoft Azure CLI". Over the l...
Jan Bakker
Nov 01, 2022Iron Contributor
Using Conditional Access, you can block Azure Management for non-admins.
You cannot prevent password spray, but make sure you have MFA for all apps and above policy in place. Let me know if you need help with that.
You cannot prevent password spray, but make sure you have MFA for all apps and above policy in place. Let me know if you need help with that.
- Steph32UKNov 02, 2022Copper ContributorHi Jan,
Many thanks for your reply. I am trying to get our Sys Admin team to get their skates on with a CA policy (unfortunately that's their remit....for now!) as we had some Webshell attacks few weeks back and I've been pushing them ever since.