Hunt for suspicious sign-in to Entra ID Using Extrnal Call Method

Google SecOps@GoogleSecOps

•updated Feb 24, 2025•0•0•2

Detects authentication to O365 followed by a non-interactive sign-ins that aligns to suspicious activity.