New CA Policy by Non-approved Actor — Detection Rule

Monitor and alert on conditional access changes.

Read the full analysis on IntelFusions