Sign-in with python-requests user agent (PREY-0058)

Arnold Chan@slaz

•updated Sep 8, 2026•0•0•1

Detects successful Azure AD sign-ins where the user agent identifies as a Python requests library version (2.33.1 or 2.34.2) that has not been observed for that specific user account in the preceding 14 days. This behavior is indicative of anomalous automated or scripted access.