ADFS DKM Property Read

Dan Zero@danzero

•updated Sep 20, 2025•4•2•65

This KQL query monitors a critical security event in Active Directory Federation Services (ADFS) environments - the reading of Distributed Key Management (DKM) properties.