HackerWorkspace

Now You See Me: AADGraphActivityLogs

https://cloudbrothers.info/en/aadgraphactivitylogs/

Read on HackerWorkspace: https://hackerworkspace.com/article/now-you-see-me-aadgraphactivitylogs

#cybersecurity #threatintelligence #penetrationtesting

Now You See Me: AADGraphActivityLogs

KQL hunting queries for the new AADGraphActivityLogs table to detect Entra ID reconnaissance tooling based on UserAgent, RequestUri, and volume.

Cloudbrothers
May 11 at 4:46amWeb