[New Rule] Entra ID device-bound PRT cookie replay from unusual IP - #6706

Merged

terrancedejesus merged 10 commits into

mainfrom

rule-entra-prt-browsercore

Sep 10, 2026

Commits on Aug 28, 2026

[New Rule] Entra ID device-bound PRT cookie replay from unusual IP

terrancedejesus
and
cursoragent
committed
f9a2d80
Update references in credential_access_entra_id_prt_cookie_replay_unusual_ip rule
terrancedejesus
authored
b8f4f27
Update minimum stack version to 9.3.0
terrancedejesus
authored
5bfcd1f

Commits on Aug 29, 2026

Merge branch 'main' into rule-entra-prt-browsercore
terrancedejesus
authored
0407f86

Commits on Aug 31, 2026

Potential fix for pull request finding

terrancedejesus
and
Copilot
authored
4b44d9b
Update credential_access_entra_id_prt_cookie_replay_unusual_ip.toml
terrancedejesus
authored
606fa51
Merge branch 'main' into rule-entra-prt-browsercore
terrancedejesus
authored
95aeb88

Commits on Sep 10, 2026

Apply suggestion from @terrancedejesus
terrancedejesus
authored
6bf7783
Apply suggestion from @terrancedejesus
terrancedejesus
authored
007153e
Merge branch 'main' into rule-entra-prt-browsercore
terrancedejesus
authored
45e38c0