Skip to main content

Use CasesGet Started with Threat Detection, Investigation, and Response (TDIR) Use Case Categories

Abnormal Authentication and Access Scenario

Learn about the Compromised Credentials Abnormal Authentication and Access scenario.

The Abnormal Authentication and Access scenario describes when an attacker compromises credentials and authenticates abnormally, like at an abnormal time or from an abnormal location, or does something outside typical usage or behavior patterns.

In the Threat Detection, Investigation, and Response (TDIR) Use Case Categories hierarchy, the Abnormal Authentication and Access scenario falls under the Compromised Credentials use case.