Risky Sign-in with Device Registration
'Looks for new device registrations following a risky user account sign-in. By default the query will use a 6 hour lookback period, this can be configured within the query.'
Microsoft Sentinel (KQL)
'Looks for new device registrations following a risky user account sign-in. By default the query will use a 6 hour lookback period, this can be configured within the query.'
Already have an account?