Visualization authentication Methods Used


Description

This visualisation shows the authentication methods that have been used based on the selected TimeFrame.

Query · kql

let TimeFrame = 30d;
SigninLogs
| where TimeGenerated > ago(TimeFrame)
| where ResultType == 0
| summarize Total = count() by AuthenticationProtocol, bin(TimeGenerated, 1d)
Raw source Visualization authentication Methods Used · KQL
Esc
Published by Bert-JanP/Hunting-Queries-Detection-Rules ↗, licensed under BSD 3-Clause ↗. Reproduced here unmodified.
# Visualization authentication Methods Used

## Query Information

#### Description
This visualisation shows the authentication methods that have been used based on the selected TimeFrame.

#### References
- https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-methods

## Sentinel
```KQL
let TimeFrame = 30d;
SigninLogs
| where TimeGenerated > ago(TimeFrame)
| where ResultType == 0
| summarize Total = count() by AuthenticationProtocol, bin(TimeGenerated, 1d)
```

Detection rules belong to the projects that publish them and remain under their own licenses. This site indexes and links to them; it claims no rights in them.