question

RichardBowmaker-6749 avatar image
0 Votes"
RichardBowmaker-6749 asked vipulsparsh-MSFT answered

Weekly digest says new risky sign-ins detected, but nothing in risky sign-ins report

I received the usual Azure AD Identity Protection Weekly Digest email today, but this time it said that 7 new risky sign-ins were detected:
97684-image.png

If I click on the link, it takes me to the "Risky sign-ins" report in the Azure portal, set up to show all risky sign-ins in the last 7 days. But this shows "No sign-ins found":
97618-image.png

Expanding the report to the last month doesn't show anything either. There's also nothing in the "Risk Detections" report.

So: Were there risky sign-ins or not? If there were, how can I see what the issue was?

Thanks!

azure-ad-identity-protection
image.png (6.7 KiB)
image.png (48.8 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@RichardBowmaker-6749 Thanks for reaching out. Allow me sometime to investigate this. Will update soon.

0 Votes 0 ·

1 Answer

vipulsparsh-MSFT avatar image
0 Votes"
vipulsparsh-MSFT answered

@RichardBowmaker-6749

Can you try following :
1) Clear the risk state filter and check the risk detection blade.
2) If the above does not show any events, open a support ticket to investigate if those sign ins were dismissed by someone else or it might be a false positive.


If the suggested response helped you resolve your issue, please do not forget to accept the response as Answer and "Up-Vote" for the answer that helped you for benefit of the community

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.