Review sign-in logs
Read a sign-in report and tell an attack from an ordinary day: impossible travel, a flood of approval requests, an old protocol that skips multifactor, and a trip that only looks suspicious.
Part of the path Security analyst starter (step 3 of 4), next: Respond to a compromised account
What you will do
4 tasks1.Spot impossible travel
Open Maria Santos: two countries in 20 minutes.
2.See the approval flood
Open Dev Patel: approval requests at 3 a.m.
3.Know when it is fine, and when it is quiet
Open Ana Ortiz: signing in from Lisbon.
4.Contain the compromised accounts
For each account that is under attack, choose the responses it calls for.