Detect Entra ID persistence backdoors by auditing GroupMembershipRule modifications in Azure AD AuditLogs with Microsoft Sentinel. #kql #entra-id #ValtersIT
https://www.valtersit.com/vault/detecting-persistence-via-new-azure-ad-dynamic-group-rule-mo-9fef0c/
