Request

Please update the Azure audit logs to collect the Azure Graph Activity logs. These activity logs provide security focused users with detailed activity of users and accounts within Azure.

https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/microsoft-graph-activity-log-is-now-available-in-public-preview/ba-p/3848269

The Infosec team has access to the activity logs but at this time the Azure integration does not collect them. https://github.com/elastic/seceng/issues/6163

• https://github.com/elastic/infosec/issues/15196