Azure AD Account Credential Leaked

Rule Info

Name
Azure AD Account Credential Leaked
Author
Mark Morowczynski '@markmorow', Gloria Lee, '@gleeiamglo'
Description
Indicates that the user's valid credentials have been leaked.
Date
2023-09-03 00:00:00
Modified
None
Id
19128e5e-4743-48dc-bd97-52e5775af817
Tags
attack.t1589 attack.reconnaissance DEMO
Type
Community Rule

Rule History

Author
Title
Date
Commit
Nasreddine Bencherchali
Merge PR #4482 From @nasbench - Add New Automation Workflows
2023-10-18
Mark Morowczynski
Merge PR #4423 from @MarkMorow - Add Azure AD Identity Protection Rules
2023-09-06