</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/8b2e84cd-6db0-47e9-badc-75c17df1995f/">Azure Active Directory Add app role assignment to service principal</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/1660d196-127f-4678-81b2-472d51711b07/">Azure Active Directory Add member to role</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/e895ed56-7be4-4b3a-b782-ecd0f594ec4c/">Azure Active Directory Add owner to application</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/fd89d337-e4c0-4162-ad13-bca36f096fe6/">Azure Active Directory Add service principal</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/d4c01fb1-3b88-46d3-bd12-9b9e256450f7/">Azure Active Directory Add unverified domain</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/4c5d6c49-53e3-4980-a4de-c63e26291ed0/">Azure Active Directory Consent to application</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/8f31966d-c496-496d-8837-f7fd11f31255/">Azure Active Directory Disable Strong Authentication</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/cb49f3cd-04ad-415c-a5ed-9b27b2829fa7/">Azure Active Directory Enable account</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/d3818bd5-f283-4518-8b67-df19240c3e40/">Azure Active Directory Invite external user</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/dcd0e4dc-68f8-4b77-a66f-89c57b3afa6b/">Azure Active Directory Reset password (by admin)</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/e7bcdab9-908c-40ab-ba38-5db54fa87750/">Azure Active Directory Set domain authentication</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/f9ed0a3a-9e20-4198-a035-d0a29593fbe0/">Azure Active Directory Sign-in activity</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/2c08188a-ba25-496e-87c7-803cf28b6c90/">Azure Active Directory Update application</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/c5b7ffcd-73d8-4fe5-afd8-b1218d715c0c/">Azure Active Directory Update authorization policy</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/5495c90a-047c-4b8e-b2fe-1db6282d3872/">Azure Active Directory Update user</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/b63240de-8a01-4ba8-8987-89d18d4b375d/">Azure Active Directory User registered security info</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
azure:monitor:aad
</td>
<td class="col-3">
Azure AD
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/2ab182e7-feda-4249-9418-32710b55a885/">Azure Audit Create or Update an Azure Automation account</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
mscs:azure:audit
</td>
<td class="col-3">
mscs:azure:audit
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/2bd83221-7a8b-436f-9b2b-efa1d44d009e/">Azure Audit Create or Update an Azure Automation Runbook</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
mscs:azure:audit
</td>
<td class="col-3">
mscs:azure:audit
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
<tr class="row">
<td class="col-0">
<a href="/sources/575faeb2-09d0-4849-b1f6-eae241f26ff2/">Azure Audit Create or Update an Azure Automation webhook</a>
</td>
<td class="col-1">
<img src="https://research.splunk.com/icons/azure.svg" alt="Azure icon" class="icon-tiny">
Azure
</td>
<td class="col-2">
mscs:azure:audit
</td>
<td class="col-3">
mscs:azure:audit
</td>
<td class="col-4">
</td>
<td class="col-5">
</td>
</tr>
</tbody>
| 
Azure