Risk detections in Azure AD Identity Protection

Risk detections in Azure AD Identity Protection include any identified suspicious actions related to user accounts in the directory. Risk detections (both user and sign-in linked) contribute to the overall user risk score that is found in the Risky Users report.

Identity Protection provides organizations access to powerful resources to see and respond quickly to these suspicious actions.

Security overview showing risky users and sign-ins

More on this topic to come, but the rest of the Microsoft information can be found here: https://bit.ly/3ympu2l