Follow

Does your log analysis / siem tool notifies you by default whenever a new user is added?

Those notifications are pretty useful and help you detect issues (or possible compromises) in almost real time.

In this example, a new user was added to Azure / Office365.

Try trunc.org if that could be useful for you

· · Web · 0 · 1 · 1
Sign in to participate in the conversation
Noc.Social

Open Source Social Network. Focused on technology, networking, linux, privacy and security, but open to anyone. Civil discourse, polite and open. Managed by the noc.org team.