Users Authenticating To Other Azure AD Tenants (5f521e4b-0105-4b72-845b-2198a54487b9)

Detect when users in your Azure AD tenant are authenticating to other Azure AD Tenants.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65)	Attack Pattern	Users Authenticating To Other Azure AD Tenants (5f521e4b-0105-4b72-845b-2198a54487b9)	Sigma-Rules	1
Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81)	Attack Pattern	Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65)	Attack Pattern	2