#32728 [Huntress Escalation] Login from unexpected country - Canada

Huntress detected one or more logins from Canada. This country is not the usage location provided by Microsoft nor was this country expected or unauthorized by an access rule when the login was observed.

Action required: Let Huntress know if logins from Canada are unauthorized and should be reported as an incident or if this login was expected. Review the escalation for more details.

Note: This is NOT an incident report. If the Huntress SOC deems this activity malicious, you will receive a follow-on incident report, regardless of whether or not you resolve this escalation.

Escalation: https://artichoke.huntress.io/org/143732/escalations/147018