[IA] - Rating sign-in attempts based on ISP
Researching about how to classify ISP based on different factors, I created a query based on ISP sign-in attempts.
Microsoft Sentinel (KQL)

Researching about how to classify ISP based on different factors, I created a query based on ISP sign-in attempts.

Already have an account?