Matt Miller
Add this data and alert on it: https://docs.microsoft.com/en-us/graph/api/resources/identityriskevent?view=graph-rest-beta
More background: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview