RiskyUsers‐Analyzer
RiskyUsers-Analyzer.ps1 is a PowerShell script utilized to simplify the analysis of the detected identity-based user risks from the Entra ID Identity Protection extracted via Microsoft-Extractor-Suite by Invictus-IR.
Fig 1: RiskyUsers-Analyzer
Fig 2: Risky Users
Note
Using the riskyUsers Graph API requires a Microsoft Entra ID P2 license.
What is Identity Protection?
Microsoft Graph - riskyUser resource type