How to break the token theft cyber-attack chain

Hi Alex,

Thank you for this article, it really helped my understanding of token authentication and strategies for protecting their use.

Question:

Is there a way to automatically revoke risky tokens (medium and high) not linked to a sign-in?

Conditional Access has made a real difference, but we still see a steady stream of Anomalous Token alerts for token use not related to a sign-in.

Thanks