Generate alert if any users are hit with X number of MFA attempts in a short time span. TTP of social engineering to generate MFA fatigue.