#35959 [Huntress Escalation] Login from unexpected VPN - Express VPN

Huntress detected one or more logins using Express VPN. This VPN was not expected or unauthorized by an access rule when the login was observed.

Action required: Let Huntress know if logins using Express VPN are unauthorized and should be reported as an incident or if this login was expected. Review the escalation for more details.

Note: This is NOT an incident report. If the Huntress SOC deems this activity malicious, you will receive a follow-on incident report, regardless of whether or not you resolve this escalation.

Organization: Human Resource Council
Escalation: https://artichoke.huntress.io/org/51616/escalations/345299

Edits made via Bulk Update Tool - see change log for this timestamp