Managed Sentinel – Alert 195
| Alert ID | MS-A195 |
| Alert Name | Multiple Password Reset by user |
| Description | This alert will determine multiple password resets by user across multiple data sources. Account manipulation including password reset may aid adversaries in maintaining access to credentials and certain permission levels within an environment. |
| Severity Level | Low |
| Threat Indicator | |
| MITRE ATT&CK Tactics | Persistence CredentialAccess |
| Log sources | Audit Logs, Signin Logs, OfficeActivity |
| False Positives | |
| Recommendations |