LoFP / google cloud platform tenant

Title	Tags
although not recommended, certain users may be required without multi-factor authentication. filter as needed	t1078.004 t1586.003 google cloud platform tenant azure active directory splunk
legitimate users may miss to reply the mfa challenge within the time window or deny it by mistake.	t1078.004 t1586.003 t1621 google cloud platform tenant aws account splunk
multiple failed mfa requests may also be a sign of authentication or application issues. filter as needed.	t1078.004 t1586.003 t1621 google cloud platform tenant o365 tenant azure active directory aws account splunk
no known false positives for this detection. please review this alert	T1110.003 T1110.004 t1586.003 google cloud platform tenant splunk