SecAlarmCourt

In the court of alarms, events are considered malicious until proven innocent.

[SecAlarmCourt @SlowWormSec]

Case #1100100
Judge: The defendant stands accused of Impossible Travel.

[SecAlarmCourt @SlowWormSec]

@easywhois Judge:
This court does not dismiss alarms on speculation. In the absence of successful MFA, I have have no choice but to rule this action as malicious!
The defendant will establish a ticket, and order remedial action which must include credential change.
:bangs gavel:

[SecAlarmCourt @SlowWormSec]

Case #1100100
Judge: The defendant stands accused of Impossible Travel.

[SecAlarmCourt @SlowWormSec]

@easywhois Prosecutor:
Very well, the people submit the User Agent string for consideration. The User Agent does not match the previous login or any other login in the last 30 days!

Defense:
My client may have been using a new device!