Building MCAS Policies - Concurrent Sessions, Multiple Devices/IPs

%3CLINGO-SUB%20id%3D%22lingo-sub-2176252%22%20slang%3D%22en-US%22%3EBuilding%20MCAS%20Policies%20-%20Concurrent%20Sessions%2C%20Multiple%20Devices%2FIPs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2176252%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20hoping%20for%20some%20suggestions%20or%20custom%20templates%20folks%20have%20built%20(in%20Microsoft%20Cloud%20App%20Security%20portal)%20to%20alert%20on%20the%20following%20use%20cases%3A%3C%2FP%3E%3CP%3E-%20Concurrent%20account%20logins%20from%20multiple%20different%20IPs%3C%2FP%3E%3CP%3E-%20Concurrent%20logins%20from%20multiple%20devices%3C%2FP%3E%3CP%3E-%20Concurrent%20login%20sessions%20%2F%20multiple%20active%20sessions%3C%2FP%3E%3CP%3E-%20Excessive%20browsing%2Fviewing%20within%20SharePoint%2FTeams%2FYammer%20-%20looking%20around%20many%20sites%2C%20files%2C%20etc.%20in%20a%20short%20amount%20(or%20specified%20amount)%20of%20time%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20in%20advance!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2176252%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECloud%20App%20Security%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Visitor

I'm hoping for some suggestions or custom templates folks have built (in Microsoft Cloud App Security portal) to alert on the following use cases:

- Concurrent account logins from multiple different IPs

- Concurrent logins from multiple devices

- Concurrent login sessions / multiple active sessions

- Excessive browsing/viewing within SharePoint/Teams/Yammer - looking around many sites, files, etc. in a short amount (or specified amount) of time

 

Thank you in advance!

0 Replies
www.000webhost.com