Activity from Anonymous IP Addresses (d8b0a4fe-07a8-41be-bd39-b14afa025d95)
Detects when a Microsoft Cloud App Security reported when users were active from an IP address that has been identified as an anonymous proxy IP address.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Activity from Anonymous IP Addresses (d8b0a4fe-07a8-41be-bd39-b14afa025d95) | Sigma-Rules | Encrypted Channel - T1573 (b8902400-e6c5-4ba2-95aa-2d35b442b118) | Attack Pattern | 1 |