Rules Contributing to Microsoft Entra Bitlocker Key Retrieval Alert

The following rules are used to identify suspicious Microsoft Entra Bitlocker key retrieval activity. Any one or more of these will trigger the Microsoft Entra Bitlocker Key Retrieval Alert. Details for each rule can be viewed by clicking the More Details link in the description.

Title

Description

BitLocker Key Retrieval

Monitor and alert for BitLocker key retrieval.