Identity Protection risk detections
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 2d2e626 · +1 −1 lines · also on GitHub
⋯ 30 unchanged lines
3131
| [Admin confirmed user compromised](#admin-confirmed-user-compromised) | Offline | Nonpremium | adminConfirmedUserCompromised |
3232
| [Anomalous Token (sign-in)](#anomalous-token-sign-in) | Real-time or Offline | Premium | anomalousToken |
3333
| [Anonymous IP address](#anonymous-ip-address) | Real-time | Nonpremium | anonymizedIPAddress |
34
−| [Atypical travel](#atypical-travel) | Offline | Premium | unlikelyTravel |
34
+| [Atypical travel](#atypical-travel) | Real-time | Premium | unlikelyTravel |
3535
| [Impossible travel](#impossible-travel) | Offline | Premium | mcasImpossibleTravel |
3636
| [Malicious IP address](#malicious-ip-address) | Offline | Premium | maliciousIPAddress |
3737
| [Mass Access to Sensitive Files](#mass-access-to-sensitive-files) | Offline | Premium | mcasFinSuspiciousFileAccess |
⋯ 278 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 18 Oct 23:34 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.