• Skip to primary navigation
  • Skip to content
  • Skip to footer
IAM Specialist AD, Azure AD and PowerShell
  • MS Graph PS
  • MS Graph App Roles
  • Exchange Online PS
  • KQL
  • B2C
  • Posts
  • About

    Azure Sentinel KQL Examples

    Examples and scenarios for IAM related KQL queries in Azure Sentinel.

    Chris Dymond

    Chris Dymond

    Cyber Security, Azure AD, Identity and Access, Software Engineering.

    • Perth, Western Australia
    • GitHub
    • LinkedIn
    • Email

    Examples and scenarios for IAM related KQL queries in Azure Sentinel.

    • Devices
      • Non-Joined Sign-ins
    • Authentication Methods
      • All
      •   By Temporary Access Pass
      • Registrations for Phone Sign-in
    • Service Principals
      • Sign-ins Outside of Specified Country

    Updated: February 12, 2023

    • GitHub
    • LinkedIn
    • Feed
    © 2023 Chris Dymond. Powered by Jekyll & Minimal Mistakes.