Microsoft Entra ID: New Hunting Query Detects Post-Compromise Token Abuse via ASN Mismatches
Surfaces rapid ASN changes between interactive and non-interactive sign-ins within 10 minutes, indicating potential post-compromise token misuse. Read More →