Plan
active
MS Graph PowerShell: querying Entra risky login detections
- Engineer — Learn: Practical walkthrough on using MS Graph and PowerShell to surface Entra ID risk detections — useful reference if you’re building automated triage or identity monitoring pipelines.
- SOC/IR — Plan: Walk through the MS Graph risk-detection commands shown here and consider incorporating them into your Entra ID hunting runbooks or SIEM enrichment workflows.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.