Increased Failed Authentications Of Any Type In Azure AD

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•27

Detects when failed sign-in attempts increase by 10% or greater within Azure AD. This could indicate brute-force attacks, password spraying, or attempts to gain unauthorized access to accounts.