Client Specific Rules
1 detection rule in this category.
| Rule | Severity | MITRE | Source |
|---|---|---|---|
| Emergency access account sign-in Template | Critical | T1078.004 | SignIn |
Emergency access account sign-in Template
| Property | Value |
|---|---|
| Severity | 🔴 Critical |
| Source | SignIn |
| MITRE | T1078.004 (Initial Access) |
Emergency/break-glass account was used to sign in
Conditions
- Match: all
userPrincipalNameEqualsemergency@contoso.com