Office 365 Brute Force Attack

If the Office.com accounts are being constantly locked out, you can’t really tell by the ADFS logs if it is an email account that is being attacked, or if it is the general Office account.  In my case, it was email, and so with MS new rules, we were able to turn off Basic authentication.  […]