LoFP LoFP / T1098.005

T1098.005

TitleTags
false positives may be generated by normal provisioning workflows for user device registration.
false positives may be generated by normal provisioning workflows that generate a password reset followed by a device registration.
false positives may be generated by users working out the geographic region where the organizations services or technology is hosted.
it is possible that the user has legitimately added a new device to their account. please verify this activity.
users may register mfa methods legitimally, investigate and filter as needed.