Suspicious Redirect URI Detection - Reverse Proxies, Tunnels & Callback Infrastructure

F S@Fsdr

•updated Mar 31, 2026•24•0•295

Detects Azure AD application registrations with redirect URIs pointing to known tunneling, reverse proxy, or attacker interaction/callback infrastructure. This can indicate an adversary attempting to establish persistence or exfiltrate data.