LoFP / google cloud platform tenant

Title	Tags
although not recommended, certain users may be required without multi-factor authentication. filter as needed	t1078.004 t1586.003 azure active directory google cloud platform tenant splunk
legitimate users may miss to reply the mfa challenge within the time window or deny it by mistake.	t1078.004 t1586.003 t1621 aws account google cloud platform tenant splunk
no known false positives for this detection. please review this alert	T1110.003 T1110.004 t1586.003 google cloud platform tenant splunk