Change to Authentication Method — Detection Rule
Change to authentication method could be an indicator of an attacker adding an auth method to the account so they can have continued access.
Change to authentication method could be an indicator of an attacker adding an auth method to the account so they can have continued access.