Forum Discussion
shawn harry
Jan 14, 2020Iron Contributor
Brute Force Attack
Recently i noticed a Brute Force Attack occurring on a LAN AAD Joined PC. This PC is opened up to the internet using RDP on a non-standard port. Fortunately the account the attackers guessed was non-...
David Caddick
Mar 27, 2020Iron Contributor
shawn harry Just wondering if you had Azure ATP installed - it sounds like that is the tool that would normally pick up this behaviour?
shawn harry
Mar 27, 2020Iron Contributor
David Caddick Hi David. No not using Azure ATP. My environment is cloud only so Azure ATP is not an option. This was a local account that was attacked though so id expect the heuristics at least in MDATP to detect a brute force at least.