entra

3 entries tagged entra

KqlLibrary
Failed sign-on bursts from a single address
2026-08-04SigninLogs T1110.003
AnalyticsRules
Impossible travel that survives contact with a VPN estate
2026-07-28SigninLogs T1078.004 medium
ThreatHunting
Where persistence hides in Entra app registrations
2026-07-19AuditLogs T1098.001