Suspicious Self-Service Password Reset by Non-Helpdesk Account
Detects a successful self-service password reset for a privileged or high-value account when the initiating context does not match an approved helpdesk workflow.
Sigma

Detects a successful self-service password reset for a privileged or high-value account when the initiating context does not match an approved helpdesk workflow.

Already have an account?