Azure Active Directory Identity and Access Classifier
Classifies Azure Active Directory Identity and Access's alerts
Azure Active Directory Identity and Access (Deprecated) Classification
Details
| ID | Azure Active Directory Identity and Access |
|---|---|
| Type | classification |
| Version | -1 |
| From Version | 6.0.0 |
| Default Incident Type | Azure Active Directory Identity and Access |
| Feed | No |
Key Type Map
| Key | Incident Type |
|---|---|
unlikelyTravel |
Azure Active Directory Identity and Access |
anonymizedIPAddress |
Azure Active Directory Identity and Access |
maliciousIPAddress |
Azure Active Directory Identity and Access |
unfamiliarFeatures |
Azure Active Directory Identity and Access |
malwareInfectedIPAddress |
Azure Active Directory Identity and Access |
suspiciousIPAddress |
Azure Active Directory Identity and Access |
leakedCredentials |
Azure Active Directory Identity and Access |
investigationsThreatIntelligence |
Azure Active Directory Identity and Access |
generic,adminConfirmedUserCompromised |
Azure Active Directory Identity and Access |
mcasImpossibleTravel |
Azure Active Directory Identity and Access |
mcasSuspiciousInboxManipulationRules |
Azure Active Directory Identity and Access |
investigationsThreatIntelligenceSigninLinked |
Azure Active Directory Identity and Access |
maliciousIPAddressValidCredentialsBlockedIP |
Azure Active Directory Identity and Access |
unknownFutureValue |
Azure Active Directory Identity and Access |