Building MCAS Policies - Concurrent Sessions, Multiple Devices/IPs

Copper Contributor

I'm hoping for some suggestions or custom templates folks have built (in Microsoft Cloud App Security portal) to alert on the following use cases:

- Concurrent account logins from multiple different IPs

- Concurrent logins from multiple devices

- Concurrent login sessions / multiple active sessions

- Excessive browsing/viewing within SharePoint/Teams/Yammer - looking around many sites, files, etc. in a short amount (or specified amount) of time

 

Thank you in advance!

0 Replies