Case 0008: Microsoft 365 BEC: Mailbox Takeover | Threat Hunting Labs

Investigate a Microsoft 365 mailbox compromise using Entra sign-in, Microsoft Graph, Exchange audit, and message trace telemetry.