Suspicious Azure AD Password Reset Activity

Ankit Mehta@Secvyn

•updated Jun 30, 2026•1•0•1

Detects suspicious activity involving multiple password resets for different users initiated by a single user within a one-hour timeframe in Azure AD. This could indicate an attacker attempting to gain control over multiple accounts.