Detections/AuditLogs/FirstAppOrServicePrincipalCredential.yaml

id: 902ec8be-b89c-45a9-bf40-28407c8a8428
name: First access credential added to Application or Service Principal where no credential was present
description: |
  'As part of content migration, this file is moved to a new location. You can find it here https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Microsoft%20Entra%20ID/Analytic%20Rules/FirstAppOrServicePrincipalCredential.yaml'
version: 1.1.2