UNK_CondorFiltration: Sign-In Attempt from TeamFiltration AWS Spray Infrastructure
Detects sign-in attempts originating from IP address ranges known to be utilized by the TeamFiltration tool for password spraying operations against Azure environments.
Microsoft Sentinel (KQL)
