Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Misc. Formatting Changes #132

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Misc. Formatting Changes #132

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
09d1fe3
Update User Sign in Analysis and Investigation Promptbook.md
ank0ku Oct 23, 2024
34b809d
Update Readme.md
ank0ku Oct 23, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Promptbook samples/User Sign in Analysis and Investigation Promptbook.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ Does the user's sign-in satisfy the Multi-Factor Authentication (MFA) requiremen
```
9. Accessing conditional access policies aligned to the user
```
/What specific conditional access policies were applied during these sign-in events
What specific conditional access policies were applied during these sign-in events
```
10. Checking the last passwprd change for the user
```
Expand Down
24 changes: 12 additions & 12 deletions Sample Prompts/Microsoft Entra/Readme.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
 
## User Details
<a name="User Details"></a>
- Who am i
- Who am I
- What login attempts exist for the user on December 31st? (Created KQL)
- What login attempts exist for the user in the last 14 days? (Created KQL)
- What login attempts exist for the user **_`<UPN>`_**? in the last 14 days? (Targeting a specific user)
Expand Down Expand Up @@ -57,17 +57,17 @@ reasons.
- Have there been any failed sign-ins during the last weekend?
- Tell me about Lee Majors most recent failed sign-in
- Show me the sign-in logs for **_`<UPN>`_**?
- Show me the sign-in logs of users who signed in from **_`<Location>`_**?
- Show me the sign-in logs from **_`<Application>`_**?
- Show me the sign-in logs from operating system 'MAC OS
- Show me the sign-in logs from Edge
- Show me the sign-in logs from compliant devices
- Show me the sign-in logs from managed devices
- Show me the sign in logs for which conditional policies have been applied
- Show me ca policies evaluated for sign in with request id **_`<Request ID>`_**?
- Show me the sign-in logs from client app
- Can you tell me if conditional access policy is working from sign-in logs
- Show me the sign-in logs from unmanaged devices in the past 14 days and list the entities involved
- Show me the sign-in logs of users who signed in from **_`<Location>`_**?
- Show me the sign-in logs from **_`<Application>`_**?
- Show me the sign-in logs from operating system 'MAC OS
- Show me the sign-in logs from Edge
- Show me the sign-in logs from compliant devices
- Show me the sign-in logs from managed devices
- Show me the sign in logs for which conditional policies have been applied
- Show me ca policies evaluated for sign in with request id **_`<Request ID>`_**?
- Show me the sign-in logs from client app
- Can you tell me if conditional access policy is working from sign-in logs
- Show me the sign-in logs from unmanaged devices in the past 14 days and list the entities involved

&nbsp;
[![alt text](../../Images/backtotop.svg)](#entra)
Expand Down