Logon from a Risky IP Address — Detection Rule

Detects when a Microsoft Cloud App Security reported when a user signs into your sanctioned apps from a risky IP address.

Read the full analysis on IntelFusions