Get IP Activity from Azure Logs
Get IP activity from Azure logs This automation requires signin logs available for P1 LVL premium feature of Azure. More details here: https://learn.microsoft.com/en-us/graph/api/resources/signin?view=graph-rest-1.0.
icon
Breakdown
  1. Search sign-in logs for failed logins from given IP address.
  2. When no failed login logs found, Automation ends.
  3. Search sign-in logs for successful logins from given IP address.
  4. When no successful login logs found, Automation ends.
  5. Filter logs to find traces of Azure portal user.
  6. Prepare report of user activity for matched users.