Unfamiliar Sign-In Properties (128faeef-79dd-44ca-b43c-a9e236a60f49)
Detects sign-in with properties that are unfamiliar to the user. The detection considers past sign-in history to look for anomalous sign-ins.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81) | Attack Pattern | Unfamiliar Sign-In Properties (128faeef-79dd-44ca-b43c-a9e236a60f49) | Sigma-Rules | 1 |