Using Microsoft Sentinel and KQL to query successful registrations for Phone Sign-in Passwordless.

By User

UserPrincipalName ActivityDateTime UTC
john.smith@domain.com 12/02/2023, 4:00:00.000 AM
admin@domain.com 11/02/2023, 5:00:00.000 PM