High

Azure/EntraID: Reset password for Global Admin user

Threat Detection
No items found.
Description

Password reset activity of user who has Global Administrator privileges assigned is very rare case and should be investigated.

Remediation
Enforced Resources
Note: Remediation steps provided by Lightlytics are meant to be suggestions and guidelines only. It is crucial to thoroughly verify and test any remediation steps before applying them to production environments. Each organization's infrastructure and security needs may differ, and blindly applying suggested remediation steps without proper testing could potentially cause unforeseen issues or vulnerabilities. Therefore, it is strongly recommended that you validate and customize any remediation steps to meet your organization's specific requirements and ensure that they align with your security policies and best practices.
Witness the future
of Cloud SecOps