🧰 Microsoft Entra ID Protection

The items that name it 2

• M365 Token Spray and Replay Campaign Compromises Business Email Accounts
  writeup2026-10-22It is written here as Microsoft Entra ID Protection: raised verified threat actor IP detections for 193.26.115[.]221, [.]72, [.]16 and [.]21 and rated a spam-sending account high risk.
• Orca Security: AI Threat Detection
  article2026-07-30

  Identity protection service; uses baselining for atypical travel detection with an initial learning period of the earliest of 14 days or 10 logins