Conditional Access Policy Modification or Deletion

nomit vyas@xoxo

•updated Jun 24, 2026•0•0•3

Detects attempts to modify or delete Conditional Access Policies in Microsoft Graph. This could indicate an adversary attempting to weaken security controls to facilitate unauthorized access or persistence.