Forum Discussion
Trent
Oct 23, 2017Iron Contributor
Azure AD Connect - Malicious replication of directory services
Hi Just implemented ATA and the first alert I got was from the MSOL account Azure AD Connect creates from the server it is running on. Is this to be expected? Thanks T
Nicholas DiCola (SECURITY JEDI)
Microsoft
Oct 24, 2017are you expecting Azure AD connect to run on that box? if yes, then exlude the machine from that detection.
- TrentOct 27, 2017Iron Contributor
Yes Azure AD Connect is on that machine.
- Nicholas DiCola (SECURITY JEDI)Oct 27, 2017
Microsoft
Then exclude it.