Can we get both risky users and risky signin report by user risk detected email from azure Portal?

Question

Can we get both risky users and risky signin report by user risk detected email from azure Portal?

ネパリサンデャ 480

Can we able to get both the risky users and risky sign-in reports by using users deleted risk email???

1 answer

Your answer

Answer 1

James Hamil 27,016 Microsoft Employee

Hi @ネパリサンデャ , to get both the risky users and risky sign-in reports by user risk detected email from Azure Portal, you can use Azure AD Identity Protection. You can search for a specific user by their email address and view their risky users and risky sign-in reports. However, if a user has been deleted, their risk history may not be available in Identity Protection. In this case, you may need to refer to your organization's audit logs or other security monitoring tools to investigate any suspicious activity related to the deleted user.

Please let me know if you have any questions and I can help you further.

If this answer helps you please mark "Accept Answer" so other users can reference it.

Thank you,

James

ネパリサンデャ 480 Reputation points

2023-12-15T00:20:31.5833333+00:00

@James Hamil

Thank you for the answer but answer but I think I have mistake some words in the question

I am talking about this part,I want to get alert of risky users and risky sign-in via email
I have checked the user at risk detected alerts feature and was default enabled for all GA

Got a risky sign-in users at high risk level even though I didnot get any notification as a GA

I know I can get both the report using weekly digest but weekly digest generate report after a week and I want to have daily notification

So My question is "Is the user at risk detected alerts" notify the GA for both risky users and sign-in or It will only notify for risky users hav high risk??

Thank you

Share via

Can we get both risky users and risky signin report by user risk detected email from azure Portal?

1 answer

Your answer