Atypical Travel — Detection Rule

Identifies two sign-ins originating from geographically distant locations, where at least one of the locations may also be atypical for the user, given past behavior.

Read the full analysis on IntelFusions