Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
Identifies unusual bulk sharing, based on a predefined threshold in the query, of Power Apps to newly created Microsoft Entra guest users.
| Attribute | Value |
|---|---|
| Type | Analytic Rule |
| Solution | Microsoft Business Applications |
| ID | 943acfa0-9285-4eb0-a9c0-42e36177ef19 |
| Severity | Medium |
| Status | Available |
| Kind | Scheduled |
| Tactics | ResourceDevelopment, InitialAccess, LateralMovement |
| Techniques | T1587, T1566, T1534 |
| Required Connectors | PowerPlatformAdmin, AzureActiveDirectory |
| Source | View on GitHub |
This content item queries data from the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
AuditLogs |
OperationName == "Invite external user" |
✓ | ✗ | ? |
PowerPlatformAdminActivity |
✓ | ✗ | ? |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
↑ Back to Analytic Rules · Back to Microsoft Business Applications