Skip to content
3 OAuth TTPs Seen This Month — and How to Detect Them with Entra ID Logs
wiz.io | blog | #cloud | #identity-security | #entra-id | #azure | #detection | #oauth | #ttps | #kql
Summary
Three OAuth techniques attackers use in Azure, and how Entra ID sign-in logs and JWT claims expose them; includes Wiz telemetry on prevalence and ready-to-use KQL detection queries.
- Published
- Collected