Medium or High Risk Browser Sign-Ins From Devices Without an Entra Device Identity
Browser sign-ins and MFA prompts with medium or high sign-in risk from devices that have no Entra device identity and are not managed or compliant. Hunting query, not an alert.
Microsoft Sentinel (KQL)

