Critical 2026 Detection — Rogue Entra ID Device Registration with Anomalous Nami

Ibrahim Saud@tektrix

•updated Sep 24, 2026•0•0•2

Detects device registration events in Entra ID where the device display name does not conform to standard enterprise organizational naming conventions. Adversaries may register unauthorized devices to an Entra ID tenant to bypass conditional access policies or gain persistence.