PnP Management Shell service principal provisioned with AppCatalog.ReadWrite.All

Adarsh Pandey@Pandeyadarsh

•updated yesterday•0•0•0

Detects suspicious Azure AD activity involving the PnP Management Shell and the AppCatalog.ReadWrite.All permission combined with service principal creation or permission grants within a short time window.