Forum Discussion
Trent
Oct 23, 2017Iron Contributor
Azure AD Connect - Malicious replication of directory services
Hi Just implemented ATA and the first alert I got was from the MSOL account Azure AD Connect creates from the server it is running on. Is this to be expected? Thanks T
Nicholas DiCola (SECURITY JEDI)
Oct 24, 2017Former Employee
are you expecting Azure AD connect to run on that box? if yes, then exlude the machine from that detection.
Trent
Oct 27, 2017Iron Contributor
Yes Azure AD Connect is on that machine.
- Nicholas DiCola (SECURITY JEDI)Oct 27, 2017Former Employee
Then exclude it.