hard20 pts · first answer countscloud-identityidentity-security
Successful sign-in with no MFA
Entra ID sign-in logs show a password spray succeeded with "Client app: Authenticated SMTP" and no MFA prompt, even though MFA is required. Why, and what fixes it?
Discussion 0
Join free to post in the discussion.
Related questions
- Which login is really two-factor?Cybersecurity Analyst
- Why passwords are saltedCybersecurity Analyst
- Brute force or password spraying?Cybersecurity Analyst
- KQL for failed Entra sign-insCybersecurity Analyst
- Triage an impossible travel alertCybersecurity Analyst
- Stopping MFA fatigue attacksCybersecurity Analyst
- Containing a hijacked Microsoft 365 accountCybersecurity Analyst
- Password reset did not stop the attackerCybersecurity Analyst