A hijacked Microsoft 365 account
This is what happens when monitoring finds a sign-in that shouldn't have happened.
- The alert goes to the analysts and on to us
- We lock the account, sign out every session and remove rogue rules
- You get a written summary for insurance and reporting
