Apr 07 2022 11:28 AM - edited Apr 07 2022 11:28 AM
https://youtu.be/4QerWyhy8Uw
Risky Principal logs are available to enable for Azure Active Directory so that Microsoft Sentinel can use them to identify risky accounts and events.