Failed Authentications From Countries You Do Not Operate Out Of — Detection Rule

Detect failed authentications from countries you do not operate out of.

Read the full analysis on IntelFusions