Forum Discussion
Tom Somerville
Mar 21, 2018Copper Contributor
Password Spray Alert Policy
Hello All,
New to the forums and to CAS.
We are an O365 customer, with licensing for CAS, and I am trying to generate an alert policy for a password spray attack.
I want the alert to trigge...
Nicholas DiCola (SECURITY JEDI)
Mar 29, 2018Former Employee
Today we only support repeated activity by a single user not IP address. We will look into this.
- Rodrigo CarneiroJun 14, 2018Copper Contributor
I was looking for the same thing. Any news on this request?
- Tom SomervilleJun 15, 2018Copper Contributor
Unfortunately, still no support for this. I am downloading the logs out of O365, and running them through a custom powershell script to look for this.
Pernille-Eskebo, any update on when you will update alert policies?
- Tom SomervilleMar 29, 2018Copper Contributor
Thank you for clarification.