Azure Sentinel KQL Examples

Examples and scenarios for IAM related KQL queries in Azure Sentinel.

• Devices
  • Non-Joined Sign-ins
• Authentication Methods
  • All
  •   By Temporary Access Pass
  • Registrations for Phone Sign-in
• Service Principals
  • Sign-ins Outside of Specified Country