Detect threats using GraphAPIAuditEvents - Part 3

For a long time now , defenders had the ability to monitor behavior of human- and workload identities in Entra tenants not only through AuditLogs…

A short excerpt. Read the linked source for the full article and context.

Monitored guidance in the same product area; this does not establish that the article cites each page.

• Entra dynamic membership rules and the memberOf operator
• Dynamic membership for administrative units
• Create simpler, more efficient dynamic membership rules
• Configure dynamic membership with the memberOf operator
• Understand and manage dynamic group processing