Detecting Microsoft Entra ID Primary Refresh Token Abuse with Next-Gen SIEM

https://www.crowdstrike.com/en-us/blog/detecting-microsoft-entra-id-primary-refresh-token-abuse-next-gen-siem/

https://twitter.com/home/status/1853645132584669386

https://twitter.com/home/status/1853809905280696496

https://twitter.com/home/status/1853827672494723436