Detections
Analytics
Indicators Release 202510271638Oct 27, 2025, 4:38 PM
modified detection
- Dangerous Application Permissions Affecting Data
- Dangerous Application Permissions Affecting the Tenant
- Dangerous Delegated Permissions Affecting Data
- Dangerous Delegated Permissions Affecting the Tenant
- Disabled Account Assigned to Privileged Role
- Dormant Privileged User
- Federated Domains List
- Federation Signing Certificates Mismatch
- First-Party Service Principal With Credentials
- Guest Account With a Privileged Role
- High Number of Administrators
- Known Federated Domain Backdoor
- Missing MFA for Privileged Account
- Never Used Privileged User
- Password Protection Not Enabled for On-Premises Environments
- Privileged Account Naming Convention
- Privileged Entra Account Synchronized With AD (Hybrid)
- Privileged Entra Account With Access To M365 Services
- Show Additional Context in Microsoft Authenticator Notifications
- Suspicious AD Synchronization Role Assignment
- Unusual Federation Signing Certificate Validity Period