Disabled MFA to Bypass Authentication Mechanisms — Detection Rule

Detection for when multi factor authentication has been disabled, which might indicate a malicious activity to bypass authentication mechanisms.

Read the full analysis on IntelFusions