O365 Excessive Authentication Failures Alert

Description

This search detects when an excessive number of authentication failures occur this search also includes attempts against MFA prompt codes

   Help

O365 Excessive Authentication Failures Alert Help

You must install splunk Microsoft Office 365 add-on. This search works with o365:management:activity

   Search

Open in Search