Activity from Infrequent Country

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects when a Microsoft Cloud App Security reported when an activity occurs from a location that wasn't recently or never visited by any user in the organization.