Python-requests user agent authenticating against Entra ID
Detects high-frequency authentication attempts or broad user targeting originating from scripts using the 'python-requests' library. This behavior is indicative of programmatic password spraying or automated credential stuffing attacks.
Microsoft Sentinel (KQL)

