Detecting Microsoft Entra ID Primary Refresh Token Abuse with Next-Gen SIEM

https://www.crowdstrike.com/en-us/blog/detecting-microsoft-entra-id-primary-refresh-token-abuse-next-gen-siem/

https://twitter.com/home/status/1853349040722710881

https://twitter.com/home/status/1853445694272512035

https://twitter.com/home/status/1853491833243939134