LoFP / t1185

t1185

Title	Tags
a user with concurrent sessions from different ips may also represent the legitimate use of more than one device. filter as needed and/or customize the threshold to fit your environment.	t1185 azure tenant aws account splunk