ip.addr == x.x.x.x and azure

retag add tags

Hello,

I captured traffic on a win10 client that is joined to a AzureAD I want to filter for the AzureAD authentication. ip.addr = x.x.x.x and keberos works for on prem AD. How to filter for Azure AD authenication?

kind regards, Roland

rschmid

asked 2020-09-03 12:03:18 +0000

edit flag offensive 0 remove flag close merge delete

Comments

Can you explain more about the client connection. Is it using this which is an encrypted connection over port 443?

Chuckc (2020-09-03 14:48:32 +0000) edit

add a comment see more comments

Be the first one to answer this question!

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

ip.addr == x.x.x.x and azure edit

Comments

Be the first one to answer this question!

ip.addr == x.x.x.x and azure