Investigated suspicious Microsoft 365 sign in activity using portal triage, containment actions like session revocation and stronger authentication, then validated remediation and practiced structured KQL hunting patterns with Azure Monitor Logs demo data.
log-analysis incident-response cybersecurity threat-hunting kusto kql microsoft-365 identity-security microsoft-entra-id soc-analysis
-
Updated
Feb 1, 2026