Multiple Geographic Locations Detected for a Single Session ID
Detects when the same SessionId is used to sign in from more than one location across interactive and non-interactive sign-ins.
Microsoft Sentinel (KQL)

Detects when the same SessionId is used to sign in from more than one location across interactive and non-interactive sign-ins.

Already have an account?