ConnectWise Supply-Chain Credential Added to Service Principal

Lacey Cochrane@NullVectorX

•updated 8 days ago•5•0•7

Detects new client secrets or certificates added to any service principal in Azure AD, specifically identifying activities linked to the ConnectWise supply-chain attack or suspicious user agents.