Write up by Lina L. about fake sign-in activity that can be generated by TA’s in Azure tenancies. https://www.inversecos.com/2023/01/detecting-fake-events-in-azure-sign-in.html?m=1