SANS ISC shares excellent guidance on need & approaches to monitor Azure AD activity logs I’d suggest you look into connecting your AAD into a LogAnalytics space in Azure. It isn’t exactly cheap, but if you don’t go overboard with the volume or retention period, you’ll find it useful. More info how to set […]