Single-Factor Authentication to Important Azure Applications

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•27

Detects when successful authentications to important applications occur using only single-factor authentication. This could indicate a weakened security posture for critical resources or a bypass of expected multi-factor authentication policies.