Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

Entra QR Code Sign-In KQL Detection

Steven Lim@KQLWizard

•updated Jul 1, 2025•7•0•81

KQL Query from file: Entra QR Code Sign-In KQL Detection

Microsoft Sentinel (KQL)

Tags

T1593.003 - Code Repositories T1116 - Code Signing T1553.002 - Code Signing S0688 - Meteor T1547.002 - Authentication Package T1131 - Authentication Package M1018 - User Account Management T1047 - Windows Management Instrumentation DS0002 - User Account TA0043 - Reconnaissance TA0005 - Defense Evasion TA0003 - Persistence TA0004 - Privilege Escalation TA0002 - Execution Admin Activity User Account Modified Azure Azure Activity Logskql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?