User Profile
LBarrera1104
Copper Contributor
Joined 2 years ago
User Widgets
Recent Discussions
Re: Create alert when a login was attempted from certain IP address (or block of addresses)
YanJagger Hello and thanks for your reply. Perhaps I missed something here, but I really don't understand the relationship between a VPN with servers in Mexico with what I'm trying to achieve. Of course, I can use a VPN for testing purposes, but first I need to draft the logic of the process, which is the point I asked help for... Thanks anyways, LB2.4KViews0likes0CommentsCreate alert when a login was attempted from certain IP address (or block of addresses)
I'm trying to create an alert when there is a login attempt to certain IP, using the following MG Graph PS command: $newAlert = Invoke-RestMethod -Uri $alertUrl -Method Post -Headers $authHeader -Body $alertBody The response I got is: Invoke-RestMethod: {"error":{"code":"","message":"POST is not supported".... $alertUrl = "http://222.178.203.72:19005/whst/63/=fqZogzlhbqnrneszbnl//v1.0/security/alerts" $AlertBody = { "networkConnections": [{ "destinationAddress": "30.1XX.XX.XX" }], "title": "Login Attempt from Specific IP", "category": "SuspiciousActivity", "description": "Login attempt detected from IP address: 30.1XX.XX.XX", "vendorInformation": { "subProvider": "Sub Prov EFI", "provider": "Prov EFI"}, "assignedTo": "me", "cloudAppStates": [{ "servicePlanId": "00000000-0000-0000-0000-000000000000", "appId": "00000002-0000-0ff1-ce00-000000000000"}] } Assume Headers are OK (they are, verified) Question: What caused the error?. Is that the endpoint URI is not the correct one? or is that this kind of alerts cannot be set using Graph?
Groups
Recent Blog Articles
No content to show