Even MOAR Powershell, looking at Entra logins - the good, the bad and the password sprays, (Fri, Aug 21st)

A hands-on diary demonstrating how to use Microsoft Graph PowerShell (e.g., `Get-MgAuditLogSignIn`) to review Entra/Azure AD sign-in logs, filter for failed or successful logins, extract geo-location and failure reasons, and detect suspicious activity such as password-spray attacks and logins from unexpected countries; the author shows example queries and notes using findings to tighten conditional access policies.