It shows the IP address that sent the spam signing in a few times, and the MFA requirement shows as "previously satisfied". After an hour to-ing and fro-ing where they seemed more concerned with the fact the account "is now secure and this won't happen again" and trying to upsell me to Azure AD Premium, I managed to get them to show me how to find sign-in audit logs in Azure. No SMS allowed.Īfter doing the usual checks, password reset, malware scan etc I got MS involved. Thing is, all our M365 accounts have mandatory MFA, and the only method we use to accept / reject is via the MS Authenticator app. one of our users has had their email compromised and used to send a shed-load of spam.
0 kommentar(er)
