Managed Sentinel – Alert 193
Alert ID | MS-A193 |
Alert Name | Attempt to bypass conditional access rule in Azure AD |
Description | This alert identifies an attempt to Bypass conditional access rule(s) in Azure Active Directory. The ConditionalAccessStatus column value details if there was an attempt to bypass Conditional Access or if the Conditional access rule was not satisfied. |
Severity Level | Low |
Threat Indicator | |
MITRE ATT&CK Tactics | CredentialAccess |
Log sources | SigninLogs |
False Positives | |
Recommendations |