Password spraying: many accounts failing sign-in from one source IP

ills3c Intel&Coffee@Ills3C

•updated today•0•0•1

Detects behavioral password spraying attacks against Azure Active Directory where a single external source IP address fails authentication against multiple distinct user accounts within a 1-hour window.