Forum Discussion
MS Defender Suspected identity theft (pass-the-ticket) alerts
Hi We've been receiving a number of alerts as above. We think this may be related to our AOVPN solution reassigning identical IP addresses to users and Defender deciding these are pass the ticket acc...
AOVPN here and MDI in recommended test mode. See several of these due to DA AOVPN. How did you go about suppressing these alerts? We are aware exhibited behavior is expected but any thoughts on exclusions for detection rule id? Raised case with support and response were unsatisfactory as it can directly introduced slippage on alerts.