Sitemap
All pages on the site.
Home
Blog
- Unified Audit Log Retention, Licensing and Missing Logs
- BEC Example: A Fictional Microsoft 365 Incident Walkthrough
- BEC Response: What to Do in the First Hour (Microsoft 365)
- MailItemsAccessed: What It Proves (and What It Doesn't)
- Illicit Consent Grant: Investigating Rogue OAuth Apps
- Entra ID Sign-in Logs Analysis: Risky Sign-ins and Travel
- AiTM Phishing Detection: Finding Token Replay in Entra ID
- Check Inbox Rules for a Hacker in Microsoft 365
- Unified Audit Log Investigation: Fields That Matter for BEC
- How to Analyze the Unified Audit Log in Your Browser
- How to Export the Unified Audit Log and Entra Sign-in Logs
- Microsoft 365 BEC Investigation: A Practitioner's Guide