All Detections

First-time Sign-in from New Country

avatar
Sagar Patel@sagar
updated Nov 8, 2025320242

Detect unauthorized access by identifying new country sign-ins for users through AADSignInEventsBeta analytics.

Microsoft Sentinel (KQL)