Preparing audit-ready reports from these federation server logs only adds to the complexity of auditing user activity. The newly added ADFS auditing in ADAudit Plus addresses these issues.

At Black Hat USA 2025, Dirk-jan Mollema showed how low-privilege cloud accounts can be turned into hybrid admins, bypassing ...