Sep 27 2021 07:18 AM - last edited on Nov 10 2021 09:55 AM by Trevor_Rusher
This blog indicates PetitPotam is now detected by Defender For Identity. But what is the corresponding Alert ID?
The Alert IDs have not been updated since October 2020:
Sep 28 2021 01:24 AM
Hi @Eli Ofek, thanks for the info. Please could you tell me the corresponding Cloud App Security ID for this? e.g. 2002 == ALERT_EXTERNAL_AATP_ABNORMAL_KERBEROS_OVERPASS_THE_HASH_SECURITY_ALERT
Hopefully the documentation could be updated to include Alert IDs 2412-2416.
Sep 30 2021 11:48 AMSolution