Forum Discussion
shawn harry
Jan 14, 2020Iron Contributor
Brute Force Attack
Recently i noticed a Brute Force Attack occurring on a LAN AAD Joined PC. This PC is opened up to the internet using RDP on a non-standard port. Fortunately the account the attackers guessed was non-...
David Caddick
Mar 27, 2020Iron Contributor
shawn harry Just wondering if you had Azure ATP installed - it sounds like that is the tool that would normally pick up this behaviour?
- shawn harryMar 27, 2020Iron Contributor
David Caddick Hi David. No not using Azure ATP. My environment is cloud only so Azure ATP is not an option. This was a local account that was attacked though so id expect the heuristics at least in MDATP to detect a brute force at least.