A small, growing collection of KQL hunting queries for detecting identity-layer threats in Microsoft Entra ID (Azure AD), runnable in Microsoft Sentinel and adaptable to Microsoft Defender XDR ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results