Investigating suspicious AI workflows in Microsoft Entra Agent ID: Agent’s user account
ID: 4269e34f-acf8-59ab-a269-a7159626dd1f
STIX ID: report--4269e34f-acf8-59ab-a269-a7159626dd1f
Feed Name: Red Canary
**Executive Summary:** This file contains an Azure AD non-interactive sign-in log for a service/agent account (Mr.Roboto) showing authentication details such as IP 51.3.97.221 (Ashburn, US), OAuth scopes, client app, device and session metadata; it is an authentication log entry and not a threat report or incident analysis.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.