Log References:

User Audit Logs: Password reset and new device registration observed
https://portal.azure.com#@0bcaf1e2-cef4-4ee5-8026-c7001fad31a2/blade/Microsoft_OperationsManagementSuite_Workspace/Logs.ReactView/resourceId/%2Fsubscriptions%2F1036b5b6-2544-46de-943c-552ba2d8f042%2FresourceGroups%2Frg-soc-lab-sentinel%2Fproviders%2FMicrosoft.OperationalInsights%2Fworkspaces%2Flaw-soc-lab-01/source/LogsBlade.AnalyticsShareLinkToQuery/q/H4sIAAAAAAAAA3MsTcks8clPL%252BaqUShOTSxKzlBQyspP1ctJLCpJrXTITcyrLEnN1ssvSlcCAOhCL8UrAAAA/timespan/2026-05-06T00%3A46%3A37.191Z%2F2026-05-13T00%3A46%3A37.191Z/limit/1000

User Account Activities Last 30 days:
https://portal.azure.com#@0bcaf1e2-cef4-4ee5-8026-c7001fad31a2/blade/Microsoft_OperationsManagementSuite_Workspace/Logs.ReactView/resourceId/%2Fsubscriptions%2F1036b5b6-2544-46de-943c-552ba2d8f042%2FresourceGroups%2Frg-soc-lab-sentinel%2Fproviders%2FMicrosoft.OperationalInsights%2Fworkspaces%2Flaw-soc-lab-01/source/LogsBlade.AnalyticsShareLinkToQuery/q/H4sIAAAAAAAAA8vKT9XLSSwqSa10yE3MqyxJzdbLL0oHAHef1dsWAAAA/timespan/2026-04-13T00%3A39%3A09.000Z%2F2026-05-13T00%3A39%3A09.934Z/limit/1000

IP Activities Last 30days:
https://portal.azure.com#@0bcaf1e2-cef4-4ee5-8026-c7001fad31a2/blade/Microsoft_OperationsManagementSuite_Workspace/Logs.ReactView/resourceId/%2Fsubscriptions%2F1036b5b6-2544-46de-943c-552ba2d8f042%2FresourceGroups%2Frg-soc-lab-sentinel%2Fproviders%2FMicrosoft.OperationalInsights%2Fworkspaces%2Flaw-soc-lab-01/source/LogsBlade.AnalyticsShareLinkToQuery/q/H4sIAAAAAAAAA51SXU%252FCMBR951eUPkFCCGqiuISHhYkxQUL4eDZdezeqWzvbTiTxx3v3AZuIL%252Fbtfpxzb8%252B5axkrqeY6tp0vst%252BBAfK09IUwYC2ZTAi9ZiPhhSG%252F87xofHXr3UAUeRFgfB%252FyMUUUfDpQgnQIvgdjtJlqAWRCnLbOSBX31o653A7hWOsPyt4Zk0luYAXManWhP2rXawxuJp3UiiUBOKzbCzh23lNjtxaMH4NybUwAH5JD1TjMjx014nnmv6zA5kkB4cxCr0wXr0pvDhkUKo0IQwX83O0QLDkrxq%252FgPZcG0mIg1woHKEtoGjE6IBSZyTrnHFWmg0uk3X%252BS1qK2SP8m6P5iWOjiz6RuEi0WulVvSu8VLTN9tD0z%252BhW4q3zfyBQeQYFhDkQj9xI15jJjyYKlUDuYZYG0WcIOTe50cVU419WuVTRNJC6LMCSsqdumnXlbhY2Q7TgAy43MGurTtV44yPMLqJfR6nhcfuledXMohzYCDAkPP6UgAmd%252BA7OkQoJkAwAA/timespan/2026-04-12T00%3A35%3A50.000Z%2F2026-05-13T00%3A35%3A50.654Z/limit/1000