Entra ID Cross-Tenant Access Policy Modified (T1484/T1098)

Ankit Mehta@Secvyn

•updated Jun 29, 2026•0•0•2

Detects any modification (add, update, or delete) to Entra ID cross-tenant access settings. Adversaries may manipulate these trust configurations to weaken inbound security restrictions, establish unauthorized access between tenants, or facilitate cross-tenant impersonation.