Consumer Teams Accounts Impersonating Internal Employees

Detects external consumer Microsoft Teams accounts (live: accounts) attempting to impersonate internal organization employees by matching display names or swapped first/last names against internal identity records.