New Country — Detection Rule

Detects sign-ins from new countries. The detection considers past activity locations to determine new and infrequent locations.

Read the full analysis on IntelFusions