Anders Kristiansen
@Pelsebubben0 followers4 downloads10 copies5 likes167 views
1 detection
Filters
Last updated
All Time
Detection languages
1
Platforms
1
Products / Services
1
MITRE Techniques
1
1
1
1
1
This detection targets suspicious ROPC (Resource Owner Password Credentials) authentication attempts involving brute-forcing of application client IDs, specifically related to the `Invoke-BruteClientIDs` function in MFA Sweep. This function can be used for enumerating gaps in MFA and/or CA policies, in addition to password validation via credential stuffing.
