Detections/SigninLogs/SuccessThenFail_DiffIP_SameUserandApp.yaml

id: f37ad409-e70d-4852-8996-7e0726015620
name: Successful logon from IP and failure from a different IP
description: |
  'As part of content migration, this file is moved to a new location. You can find it here https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Entra%20ID/Analytic%20Rules/SuccessThenFail_DiffIP_SameUserandApp.yaml'
version: 1.1.2