Unmanaged Device and Mobile Compromise - Credential Access from Outside Corporate Network

Ankit Mehta@Secvyn

•updated Jun 15, 2026•3•0•9

Detects suspicious device access patterns and multiple failed authentication attempts from unmanaged devices and outside the corporate network, combined with Azure AD Identity Protection risk states. This rule identifies potential credential access attempts or account compromise.