Activity from Anonymous IP Addresses — Detection Rule

Detects when a Microsoft Cloud App Security reported when users were active from an IP address that has been identified as an anonymous proxy IP address.

Read the full analysis on IntelFusions