Conditional Access Policy Modification or Deletion

nomit vyas@xoxo

•updated Jun 24, 2026•3•0•7

Detects attempts to modify or delete Conditional Access Policies in Microsoft Graph. Adversaries may attempt to alter or remove Conditional Access Policies to bypass security controls and gain unauthorized access or persistence.