Managed Sentinel – Alert 237
| Alert ID | MS-A237 |
| Alert Name | Radius authentications from the same user from multiple IP addresses |
| Description | This alerts is triggered the same user attempting to authenticate via Radius from multiple IP addresses. |
| Severity Level | Low |
| Threat Indicator | |
| MITRE ATT&CK Tactics | CredentialAccess |
| Log sources | Radius Events |
| False Positives | |
| Recommendations |