Forum Discussion
frank_df
Jun 16, 2022Copper Contributor
Azure AD Identity Protection Notify Users
Hello, In Identity Protection, is there a way to notify users when a risk detection happens? I do not refer to "Users at risk detected alerts" nor to the "Weekly Digest". I just need users are ...
VasilMichev
Jun 16, 2022MVP
Not by default, no. You can create a custom alert by scraping the corresponding risk detection events from the audit log.
- frank_dfJun 17, 2022Copper Contributor
VasilMichev you refer to Log Analytics alert rules, right?
- VasilMichevJun 17, 2022MVPThere are many options, you can also get the Azure AD logs via the Graph API, query the Unified audit log in M365 via PowerShell or use the management activities API, etc.
- frank_dfJun 17, 2022Copper ContributorI had prepared a Powershell script that invokes Graph API indeed, but I was wondering if there was a ready-to-use automation in order to keep it simple and standard. Thank you, Vasil.