Logon from a Risky IP Address

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•0

Detects when a Microsoft Cloud App Security reported when a user signs into your sanctioned apps from a risky IP address.