Duo Security Fraudulent Push Notification SIEM Detection
Duo Security is used to require Multi-Factor Authentication (MFA) to an organization. With Blumira, admins can consolidate MFA authentication logs and correlate them towards Blumira Security Detections. This samples shows a detection(finding) alert in Blumira when a user marks a push notification as a fraudulent request.
Test SIEM Detection - Duo Security Fraudulent Push Notification
This guide will walk through a detection test when a user utilizing Duo Security gets a push notification from a fraudulent source.
Prerequisites:
- The Duo Security Module must be enabled and logging properly to Blumira
- Have the Duo Admin Panel & Blumira Admin Panel open
- Go to an application protected by Duo Security
- Once on the Duo Prompt (MFA) screen, select "Send Me a Push" to your mobile device or tablet
- When received, deny the push notification by select the red X
- Select "Report as Fraud"
- Within minutes, a Finding (alert) will appear in Blumira on the Responder Dashboard
Additional Security Resources
View All Posts
Security How-To
6 min read
| August 20, 2024
I Can SIEM Clearly Now, the Pain is Gone (with Rapid SIEM Deployment)
Read More
Security Trends and Info
2 min read
| August 20, 2024
451 Report: SIEM Market Disruption Creates Opportunity
Read More
Blumira News
3 min read
| August 15, 2024
Blumira Named Finalist in Cyber Defense Magazine's 2024 InfoSec Innovator Awards
Read MoreGet Started for Free
Experience the Blumira Free SIEM, with automated detection and response plus compliance reports for 3 cloud connectors, forever.