Forum Discussion

Copper Contributor

Jun 08, 2022

The rule "Attempts to crack distributed passwords in AzureAD" is always detected with the same user.

Hi everyone, I don't know if anyone has had this problem. My problem is that when this rule is detected the same user is always triggered when trying to connect to the "Office 365 Exchange Online...

Copper Contributor

Dec 08, 2022

Chris_321, I see its been few months already for your question. Have you resolved this issue?

I am also facing this issue. I see that few specific users only this rule is firing up every day. Its strange that its only for specific users and not random or multiple users

Chris_321

Copper Contributor

Feb 08, 2023

Hi!!!bsukalp

Sorry for the delay. I was doing some research with the customer and as a solution for me the application was removed and reinstalled again for that user. It seems like it had stuck with an old password and was kind of internally trying to log in all the time.