In that top insights pane, i would love to be able to see the last x signins. Im really after what locations the user logged in from, did they come from managed devices, pass conditional access, etc etc .
I built an Incidents Analytics Workbook, where you type in the incedent number and it resolves the related entites. When you select an Account it shows you their last logins (SigninLogs) with location etc. as well as the last AuditLogs for that account. You can click a direct Link to the AAD user page as well. If you select an IP address, it shows all SigninLogs with that IP (create for those Password Spray Attacks). You can customize all your needs with a Workbook. I'm happy the new experience comes closer to my Workbook now. Maybe you consider building your own Workbook based on your needs, I found it to be very useful and flexible.
Really good work. Thank you.
In that top insights pane, i would love to be able to see the last x signins. Im really after what locations the user logged in from, did they come from managed devices, pass conditional access, etc etc
.
I built an Incidents Analytics Workbook, where you type in the incedent number and it resolves the related entites. When you select an Account it shows you their last logins (SigninLogs) with location etc. as well as the last AuditLogs for that account. You can click a direct Link to the AAD user page as well. If you select an IP address, it shows all SigninLogs with that IP (create for those Password Spray Attacks). You can customize all your needs with a Workbook. I'm happy the new experience comes closer to my Workbook now.
Maybe you consider building your own Workbook based on your needs, I found it to be very useful and flexible.
@@HerrKapitaen what a great idea!
Thx!!
This will be very helpful in day to day incident managing.
Amazing!
Awesome 😎
👍👍👍