#34469 [Huntress Escalation] Login without Entra Usage Location

Resolved Created May 7, 2025, 8:58 PM Resolved Aug 28, 2025, 1:05 AM

Huntress (internal) May 7, 2025, 8:58 PM

Huntress detected one or more identity logins without a Usage Location. The Usage Location is set within Microsoft Entra ID settings. Huntress utilizes this location to identify where the identity should be logging in from following a normal pattern of behavior.

Please note: This is NOT an incident report. If the Huntress SOC deems this activity malicious, you will receive a follow-on incident report regardless of whether or not you resolve this escalation.

Action required: Set the usage location for the affected identities. Review the escalation for more details.

Escalation: https://artichoke.huntress.io/org/83316/escalations/208374

[email protected] (internal) Aug 28, 2025, 1:05 AM

Edits made via Bulk Update Tool - see change log for this timestamp