T1212 on sentinelchangelog.nethttp://sentinelchangelog.net/tags/t1212/Recent content in T1212 on sentinelchangelog.netHugo -- 0.157.0enWed, 17 Jun 2026 05:44:03 +0000New eDCRule Solution: 10 Entra ID and Azure Subscription Analytic Rules for Privilege Escalation and Identity Abuse Detectionhttp://sentinelchangelog.net/posts/2026-06-17-pr-14392/Wed, 17 Jun 2026 05:44:03 +0000http://sentinelchangelog.net/posts/2026-06-17-pr-14392/A new community solution adds 10 scheduled Analytic Rules (plus Chinese-localized counterparts) targeting Microsoft Entra ID privilege escalation, OAuth token abuse, federation trust tampering, and Azure VM Run Command abuse correlated with UEBA signals.