Inactive Disabled User Accounts
Detects user accounts that have been disabled for an extended period (greater than 100 days), which could potentially be abused or overlooked.
Microsoft Sentinel (KQL)
Detects user accounts that have been disabled for an extended period (greater than 100 days), which could potentially be abused or overlooked.
Already have an account?