Sign-in to My Sign-Ins security info portal from anomalous location/device

Ibrahim Saud@tektrix

•updated Sep 18, 2026•1•0•1

This rule detects successful sign-in activity to the 'My Sign-Ins' application where the device is not marked as trusted or the sign-in carries a non-zero risk level. This behavior may indicate an adversary attempting to gain access to account security settings or sensitive portal information using compromised or unmanaged devices.