← nejvýznamnější zprávy · všechny zprávy

Using Microsoft Graph and Powershell - Risk Detection Commands, (Thu, Aug 20th)

Building on the last diary on Using MS Graph and Powershell, let's look at "Risky" logins. Risky logins are a derived set of parameters that look at various (you guessed it) risky login parameters. What is considered a risk? In most cases this is either impossible geography - in other words "we're not expecting to see you at that IP, in that subnet, ASN or country", or unusual device - ie "that's not your regular computer" There are two groups of commands in this area. You can do Risk Detection…

Číst originál na SANS Internet Storm Ctr. →

CZ · EN/orig

Microsoft US