Forum Discussion
Analyze Self Service Password Reset Log Events
Having implemented SSPR, how can the SSPR logs be analyzed to get Alerts / Risks in Azure AD Identity Protection or Azure Security Center based on use a case like large number of SSPRs from the same source or user, eg. 5 in 1 hour, and when such activity is seen, to create an alert and e-mail notification and automatic locking of the account?
2 Replies
had you seen the content pack? https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-reporting
Thank you Clive, yes I had seen that.
