Forum Discussion
Password Spray Alert
Hello All, New to this environment, so I hope I am posting this request to the correct location Recently I picked up a users account in azure has been hit by a password spray, but noticed the...
Dear Magson,
Maybe my blog about combining Azure AD Identity Protection and Azure ATP (Defender for Identity) could help you:
https://www.patrickvanbemmelen.nl/azure-ad-identity-protection-and-azure-atp-combine-cloud-and-on-prem-id-security/
You will find guidance on how you can create a new alert policy under CREATE A NEW POLICY WITH MAIL AND TEXT (SMS) ALERT
The most important thing to notice here is that you set the "App equals to" to Office 365 or Active Directory and the correct activity type.
I hope this will help you with setting the policy.
Maybe my blog about combining Azure AD Identity Protection and Azure ATP (Defender for Identity) could help you:
https://www.patrickvanbemmelen.nl/azure-ad-identity-protection-and-azure-atp-combine-cloud-and-on-prem-id-security/
You will find guidance on how you can create a new alert policy under CREATE A NEW POLICY WITH MAIL AND TEXT (SMS) ALERT
The most important thing to notice here is that you set the "App equals to" to Office 365 or Active Directory and the correct activity type.
I hope this will help you with setting the policy.
BemmelenPatrick fantastic I will give this a look over. thank you for your time.
- No problem Magson, I'm here to help and happy to do so 🙂
