Storm-0940 Known IOC IP Sign-In and Microsoft Graph Activity

Kaung Khant Ko@kaungkhantko

•updated today•5•0•6

Detects sign-in events and Microsoft Graph API activities originating from known Indicator of Compromise (IOC) IP addresses associated with Storm-0940 threat group activity.