Graph Activity Logs should include the display names

The Graph Activity logs are great and we are already exporting them to our Elastic SIEM for alerting and threat hunting, but the lack of display names in the logs is frustrating. The Graph activity logs only contain the values by ID such as userID, appID, groupID, etc. When doing…

25/04/2024Microsoft Entra (Azure AD)

Share:

You may be interested in

Self Service Password Reset without being forced to have MFA enabled
Microsoft Entra (Azure AD),
We have enrolled MFA for parts of our company (Guests, IT department, parts of the administration) so far and are slowly pushing forward. MFA is controlled by a Conditional Access…
21/03/2024
New Blog | Addressing Data Exfiltration: Token Theft Talk
Microsoft Entra (Azure AD),
Stolen authentication artifacts – tokens and cookies – can be used to impersonate the victim and gain access to everything the victim had access to. Up until a few years…
02/01/2024
Multitenant collaboration – share users – can’t choose groups
Microsoft Entra (Azure AD),
Hi all, I am configuring the new multitenant collaboration now that it's out of preview. When I last was testing it in preview, when I clicked "Share users" I was…
03/06/2024
What objects are required to sync for Azure AD Connect?
Microsoft Entra (Azure AD),
Trying to clean up our environment of unnecessarily synced objects. Of course, I want to sync users with e-mail, security groups, contacts, and so forth. However, the following top-level domain…
05/01/2024
Enable Guests to be able to send email to Group
Microsoft Entra (Azure AD),
The goal of this post is to find a way to allow specific external users to send an email message to a Group. I wish to do this via whitelist:…
19/11/2023
Prevent Entra ID /authorize endpoint from logging users to other microsoft services
Microsoft Entra (Azure AD),
Hi, We want to use entra id as an OIDC provider to log in users to our applications. However, our use case requires that when users log in (on…
30/11/2023
Tenant Issue: Admins are not able to authenticate as of the 24th of September
Microsoft Entra (Azure AD),
Hello All, Situation: Admins are being forced to authenticate with Smart Cards or Certificates, but we did not make this change. So now not only am I blocked from…
28/09/2024
User Audit Logs – Compromised Computer Help
Microsoft Entra (Azure AD),
Hello- I had a user MS credentials used to login remotely. Account is stable now but as I go through logs for the time, I believe the user gave…
27/01/2024
Bitwarden Passkey
Microsoft Entra (Azure AD),
I tried to implement passkeys with Bitwarden, but I am getting an error during the last step of the setup. I have added Bitwarden's AAGUID (d548826e-79b4-db40-a3d8-11116f7e8349) to the allow list…
23/05/2024
Microsoft alert regarding the Yahoo mail app
Microsoft Entra (Azure AD),
I have been receiving Admin alerts from Microsoft stating: "We've detected users in your tenant may have had email messages unexpectedly deleted by the Yahoo mail app". The recommended action is…
14/11/2023
What’s new in Microsoft Entra – September 2024
Microsoft Entra (Azure AD),
We’re excited to announce the general availability of Microsoft Entra Suite—one of the industry’s most comprehensive secure access solutions for the workforce. With 66% of digital attack paths involving insecure…
09/10/2024
Azure Monitor Reporting on App and Enterprise Applications/Registration
Microsoft Entra (Azure AD),
Hello everyone,I would like to leverage the usage of Azure Monitor, and build a report across the estate with any and all Enterprise Application and App registrations that have or…
08/04/2024