O365 Entra ID App Permissions Threshold Exceeded

Google SecOps@GoogleSecOps

•updated Jan 30, 2025•1•0•5

Detects when an excessive number of permissions are assigned to an Entra ID application within a time window, potentially indicating a greedy permission grab, as a numeric value comparing old permissions to new permissions