Rules Contributing to Microsoft Entra Unusual Account Creation Alert

The following rules are used to identify Microsoft Entra unusual account creation activity. Any one or more of these will trigger the Microsoft Entra Unusual Account Creation Alert. Details for each rule can be viewed by clicking the More Details link in the description.

Title

Description

Account Created and Deleted within a Close Timeframe

Detects when an account was created and deleted in a short period of time.