Skip to Main Content
Microsoft Identity and Access Administrator Exam Guide
book

Microsoft Identity and Access Administrator Exam Guide

by Dwayne Natwick
March 2022
Beginner content levelBeginner
452 pages
8h 59m
English
Packt Publishing
Content preview from Microsoft Identity and Access Administrator Exam Guide

Chapter 14: Analyzing and Investigating Sign-in Logs and Elevated Risk Users

The previous chapter covered planning and implementing our privileged access for administrator accounts and managing them with access reviews. This included the benefits of using privileged identity management and how to audit these privileged assignments. In this chapter, we will discuss how to analyze, review, and investigate our logs and events for protecting against risky sign-ins and elevated risk users.

We're going to cover the following main topics:

  • Analyzing and investigating sign-in logs to troubleshoot access issues
  • Reviewing and monitoring Azure AD audit logs
  • Analyzing Azure Active Directory workbooks and reporting

Technical requirements

In this chapter, ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Start your free trial

You might also like

Exam Ref MS-500 Microsoft 365 Security Administration

Exam Ref MS-500 Microsoft 365 Security Administration

Ed Fisher, Nate Chamberlain
Exam Ref SC-300 Microsoft Identity and Access Administrator

Exam Ref SC-300 Microsoft Identity and Access Administrator

Razi Rais, Ilya Lushnikov, Jeevan Bisht, Padma Chilakapati, Vinayak Shenoy
Microsoft Azure Network Security

Microsoft Azure Network Security

Nicholas DiCola, Anthony Roman

Publisher Resources

ISBN: 9781801818049