Potential MFA Bypass Using Legacy Client Authentication — Detection Rule

Detects successful authentication from potential clients using legacy authentication via user agent strings. This could be a sign of MFA bypass using a password spray attack.

Read the full analysis on IntelFusions