↳ Source GitHubSolution

Cloud Identity Threat Protection Essentials

Description

As more and more companies move to the cloud - attacks to the cloud identity system are becoming more commonplace. The **Cloud Identity Threat Protection Essentials** solution looks for most common cloud focused identity attacks such as Suspicious Sign-ins, privilege grants, MFA disable etc. Rapid detection of these attacks can enable organizations to respond faster and stop them from progressing further. **Pre-requisites:** This is a [domain solution](https://learn.microsoft.com/en-us/azure/sentinel/sentinel-solutions-catalog#domain-solutions) and does not include any data connectors. The content in this solution supports the connectors listed below. Install one or more of the listed solutions, to unlock the value provided by this solution. 1. Microsoft Entra ID 2. Amazon Web Services 3. Microsoft Entra ID Identity Protection **Keywords:** MFA, Nord VPN, VPS, Disabled Account, Suspicious Sign-in, Service principal
Version
3.0.3
Auteur / éditeur déclaré
Microsoft - support@microsoft.com
Niveau de support
Microsoft

Contenus associés

Liens établis à partir des identifiants déclarés et des manifests des solutions.

Traçabilité de la source

GitHub

Les valeurs affichées proviennent des fichiers du dépôt Azure/Azure-Sentinel. Elles décrivent le modèle publié, pas la configuration de votre workspace.

Identifiant source
azure-sentinel-solution-cloudthreatdetection
Autres fichiers source 2Solutions/Cloud Identity Threat Protection Essentials/Data/Solution_CloudIdentityThreatDetection.jsonsolution-manifest ↗Solutions/Cloud Identity Threat Protection Essentials/SolutionMetadata.jsonsolution-metadata ↗
GSTEP / SUIVI DU CATALOGUE

Ajouté au catalogue : 16 sept. 2026 · 05:49 UTC
Dernier changement observé : 16 sept. 2026 · 05:49 UTC

Dates de synchronisation GSTEP, distinctes des dates de publication du contenu source.