Techniques
Sample rules
Sign-in Failure Due to Conditional Access Requirements Not Met
- source: sigma
- technicques:
- t1078
- t1078.004
- t1110
Description
Define a baseline threshold for failed sign-ins due to Conditional Access failures
Detection logic
condition: selection
selection:
ResultType: 53003
Resultdescription: Blocked by Conditional Access