Azure AD Only Single Factor Authentication Required (28eea407-28d7-4e42-b0be-575d5ba60b2c)

Detect when users are authenticating without MFA being required.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Azure AD Only Single Factor Authentication Required (28eea407-28d7-4e42-b0be-575d5ba60b2c)	Sigma-Rules	Multi-Factor Authentication - T1556.006 (b4409cd8-0da9-46e1-a401-a241afd4d1cc)	Attack Pattern	1
Azure AD Only Single Factor Authentication Required (28eea407-28d7-4e42-b0be-575d5ba60b2c)	Sigma-Rules	Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65)	Attack Pattern	1
Modify Authentication Process - T1556 (f4c1826f-a322-41cd-9557-562100848c84)	Attack Pattern	Multi-Factor Authentication - T1556.006 (b4409cd8-0da9-46e1-a401-a241afd4d1cc)	Attack Pattern	2
Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81)	Attack Pattern	Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65)	Attack Pattern	2