Still not doing MFA yet? Get it on your list. Then do Azure AD Banned Password protection next.
— Root (@rootsecdev) July 12, 2020
When you start putting password protection in audit mode you will start to discover the severe risk of not doing MFA at all. https://t.co/m24SnAT3Ck