2026 Critical Cloud Identity Detection: Cross-Tenant Access Policy Modified to Allow External B2B Trust
Detects modifications to Entra ID (Azure AD) cross-tenant access settings, including inbound/outbound trust settings and B2B collaboration configurations. This activity may indicate an adversary attempting to establish persistence or facilitate unauthorized access by creating a trust relationship with an external tenant they control.
Cortex XDR

