Impossible Travel - Auth Logins from multiple Destinations in a short-time span

Syed Usfar Wasim@nCD24

•updated Aug 3, 2026•14•1•26

This KQL detects possible impossible travel sign-in patterns by identifying users who had successful Entra ID sign-ins from different countries within a short time window of 4 hours.