Storm-2755 - Impossible Travel via Canadian Proxy

Ibrahim Saud@tektrix

•updated Jun 21, 2026•2•0•11

Identifies logins from known malicious VPN/Proxy exit nodes geolocated in Canada, specifically attempting to bypass geographic conditional access rules. This rule joins location data with threat intelligence indicators to detect suspicious access patterns.