Microsoft Sentinel medium experimental kql

SenservaPro AD Applications Not Using Client Credentials

'Searches for logs of AD Applications without Client Credentials (Key or Secret)'

View Source

Detection Logic

SenservaPro_CL
| where ControlName_s == 'ApplicationNotUsingClientCredentials'

Field Validations

Loading…

Comments (0)

Loading comments...