Analytics BIOC
Informational
✕
A new Azure email domain verification was requested
A new Azure email domain verification was requested.
- Module:
- Cortex Cloud
- Licensed by:
- Cloud Runtime Security (CRS)
- Data source:
- Azure Audit Log
ATT&CK tactics: Resource Development (TA0042)
ATT&CK techniques: Compromise Accounts: Email Accounts (T1586.002)
Attacker's goals:
Use an existing domain to launch phishing attacks from your environment.
Investigative actions:
Check if you recognize the added email domain.
- Test period:
- N/A (single event)
- Deduplication:
- 5 Days
1 variation:
- A new Azure email domain verification was requested by an unusual identity Low (parent: Informational)