[Rule Tuning] Suspicious Entra ID OAuth User Impersonation Scope Detected#5190

terrancedejesus merged 6 commits intomainelastic/detection-rules:mainfrom

terrancedejesus/issue5189elastic/detection-rules:terrancedejesus/issue5189Copy head branch name to clipboard