Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

Check for Entra Legacy TLS Login

Steven Lim@KQLWizard

•updated Jul 1, 2025•6•0•82

KQL Query from file: Check for Entra Legacy TLS Login

Microsoft Sentinel (KQL)

Tags

M1020 - SSL/TLS Inspection S1202 - LockBit 3.0 S1199 - LockBit 2.0 T1055.005 - Thread Local Storage T1588.004 - Digital Certificates T1573.001 - Symmetric Cryptography T1219.001 - IDE Tunneling T1176.002 - IDE Extensions T1052 - Exfiltration Over Physical Medium TA0005 - Defense Evasion TA0004 - Privilege Escalation TA0042 - Resource Development TA0011 - Command and Control TA0003 - Persistence TA0010 - Exfiltration Authentication Attempt Azure Azure Signin Logskql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?