#35987 [Huntress Escalation] Login from unexpected country - South Africa

Huntress detected one or more logins from South Africa. This country is not the usage location provided by Microsoft nor was this country expected or unauthorized by an access rule when the login was observed.

Action required: Let Huntress know if logins from South Africa are unauthorized and should be reported as an incident or if this login was expected. Review the escalation for more details.

Note: This is NOT an incident report. If the Huntress SOC deems this activity malicious, you will receive a follow-on incident report, regardless of whether or not you resolve this escalation.

Organization: Farran Realty Partners
Escalation: https://artichoke.huntress.io/org/143732/escalations/348220