Identity Protection risk detections
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit dbf917d · +8 −8 lines · also on GitHub
⋯ 104 unchanged lines
105105
106106
- Calculated in real-time or offline
107107
- License requirement: Microsoft Entra ID P2
108
−- [Tips for investigating anomalous token detections.](howto-identity-protection-investigate-risk.md#investigating-anomalous-token-and-token-issuer-anomaly-detections)
108
+- [Tips for investigating anomalous token detections.](howto-identity-protection-investigate-risk.md#anomalous-token-and-token-issuer-anomaly-detections)
109109
110110
### Anonymous IP address
111111
⋯ 10 unchanged lines
122122
123123
- Calculated offline
124124
- License requirement: Microsoft Entra ID P2
125
−- [Tips for investigating atypical travel detections.](howto-identity-protection-investigate-risk.md#investigating-atypical-travel-detections)
125
+- [Tips for investigating atypical travel detections.](howto-identity-protection-investigate-risk.md#atypical-travel-detections)
126126
127127
### Impossible travel
128128
⋯ 10 unchanged lines
139139
140140
- Calculated offline
141141
- License requirement: Microsoft Entra ID P2
142
−- [Tips for investigating malicious IP address detections.](howto-identity-protection-investigate-risk.md#investigating-malicious-ip-address-detections)
142
+- [Tips for investigating malicious IP address detections.](howto-identity-protection-investigate-risk.md#malicious-ip-address-detections)
143143
144144
### Mass access to sensitive files
145145
⋯ 27 unchanged lines
173173
174174
- Calculated in real-time or offline
175175
- License requirement: Microsoft Entra ID P2
176
−- [Tips for investigating password spray detections.](howto-identity-protection-investigate-risk.md#investigating-password-spray-detections)
176
+- [Tips for investigating password spray detections.](howto-identity-protection-investigate-risk.md#password-spray-detections)
177177
178178
### Suspicious browser
179179
⋯ 1 unchanged line
181181
182182
- Calculated offline
183183
- License requirement: Microsoft Entra ID P2
184
−- [Tips for investigating suspicious browser detections.](howto-identity-protection-investigate-risk.md#investigating-suspicious-browser-detections)
184
+- [Tips for investigating suspicious browser detections.](howto-identity-protection-investigate-risk.md#suspicious-browser-detections)
185185
186186
### Suspicious inbox forwarding
187187
⋯ 19 unchanged lines
207207
208208
- Calculated offline
209209
- License requirement: Microsoft Entra ID P2
210
−- [Tips for investigating token issuer anomaly detections.](howto-identity-protection-investigate-risk.md#investigating-anomalous-token-and-token-issuer-anomaly-detections)
210
+- [Tips for investigating token issuer anomaly detections.](howto-identity-protection-investigate-risk.md#anomalous-token-and-token-issuer-anomaly-detections)
211211
212212
### Unfamiliar sign-in properties
213213
⋯ 32 unchanged lines
246246
247247
- Calculated in real-time or offline
248248
- License requirement: Microsoft Entra ID P2
249
−- [Tips for investigating anomalous token detections.](howto-identity-protection-investigate-risk.md#investigating-anomalous-token-and-token-issuer-anomaly-detections)
249
+- [Tips for investigating anomalous token detections.](howto-identity-protection-investigate-risk.md#anomalous-token-and-token-issuer-anomaly-detections)
250250
251251
### Anomalous user activity
252252
⋯ 17 unchanged lines
270270
271271
- Calculated offline
272272
- License requirement: Microsoft Entra ID Free or Microsoft Entra ID P1
273
−- [Tips for investigating leaked credentials detections.](howto-identity-protection-investigate-risk.md#investigating-leaked-credentials-detections)
273
+- [Tips for investigating leaked credentials detections.](howto-identity-protection-investigate-risk.md#leaked-credentials-detections)
274274
275275
### Microsoft Entra threat intelligence (user)
276276
⋯ 37 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 06:04 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.