

Monitor the Microsoft Azure Directory Audits log with Graph API for fraud reports. Fraud reports occur when a user receives a Microsoft Authenticator MFA push, declines, and reports the push.
Nate Adams at Sophos
How it works
Import this story to your tenant, from where you can adapt it to meet your unique needs.
Import