Fortinet admin login success from non-trusted source IP
Detects successful administrative login events originating from IP addresses outside of configured trusted management networks on Fortinet devices.
Microsoft Sentinel (KQL)

Detects successful administrative login events originating from IP addresses outside of configured trusted management networks on Fortinet devices.

Already have an account?