#365daysofkql day 92 – detect when an #AzureAD service principal is granted access to Azure management scope, e.g. being made contributor to a subscription or resource group – https://t.co/V5Trn749wo #MicrosoftSentinel #KQL (this one is from a blog post hopefully out later today)

#365daysofkql day 92 – detect when an #AzureAD service principal is granted access to Azure management scope, e.g. being made contributor to a subscription or resource group – https://t.co/V5Trn749wo #MicrosoftSentinel #KQL (this one is from a blog post hopefully out later today)
from reprise_99
twit https://twitter.com/reprise_99/status/1478111831134666755