2026 Critical Cloud Identity Detection: Cross-Tenant Access/B2B Sync Trust Modif
Detects modifications to Microsoft Entra ID (formerly Azure AD) cross-tenant access policies or B2B synchronization settings. Specifically, this rule monitors for the addition of new external partner tenants to trust lists or the relaxation of security controls such as MFA and compliant device requirements for external partner access.
Microsoft Sentinel (KQL)
