IAM Event - Multiple Password Reset

EVENT

Password Reset - A User's Password has been reset more than 3 times in one hour.

RECOMMENDED ACTION

Contact the Customer or User and make them aware of this event.  This event indicates a possible account compromise by an unauthorized actor.  It is recommended to reset the password to a complex password and enable MFA if not already enabled.

ALERT TYPE

Critical Alert