Detections tagged with CAP

Jan 1, 2025 2025-01-01: Azure Active Directory - Conditional Access Policy Modified
#KQL#Sentinel#CAP#AzureAD#T1556.009
Jan 24, 2025 AzureAD - CAP: Conditional Access Policy Deleted
#KQL#Sentinel#AzureAD#CAP#AuditLogs#T1556.009
Jan 27, 2025 Azure AD - CAP: New Trusted Location Created
#KQL#Sentinel#AzureAD#CAP#AuditLogs#T1556.009
Jan 28, 2025 Azure AD - CAP: Named Location Modified
#KQL#Sentinel#AzureAD#CAP#AuditLogs#T1556.009
Jan 29, 2025 Azure AD - CAP: Trusted Location Modified
#KQL#Sentinel#AzureAD#CAP#AuditLogs#T1556.009