Categoría: Identities

  • Success sign-in from more than 3 countries in 1 day

    A while ago, I was annoyed with some Defender XDR alerts related to «User Impossible travel». I had different false positives, users who were using VPN, different devices, different countries on the same day (not a surprise if you live in central Europe) and others. So, I decided to create…

  • Differences between EntraID User Phone and MFA auth. number

    how easy How easy is to identify a «malicious» phone of an attacker configured as MFA on user authentication? I have seen multiple queries that can help such as identify by country code, suspicious format-number and others. Although are good ones, I have not seen these option as a final…