Forum Discussion
printscreen
Jan 18, 2021Brass Contributor
Is there a playbook to deploy for users to complete MFA if there sign in is detected as being risky
Hi, Is there a playbook to deploy for users to complete MFA if their sign-in is detected as being risky or suspicious? If it is, how to test it?
GaryBushey
Jan 19, 2021Bronze Contributor
printscreen There is a playbook in the Azure Sentinel Github playbook repository, Azure-Sentinel/Playbooks at master · Azure/Azure-Sentinel · GitHub, called "Confirm-AADRiskyUser" that may work for you or at least give you a good starting point.