# AI-Generated Detection Rule
# Generated by AI Assistant
# Pattern: "canary":"([^"]+)"

#Tue Apr 21 13:30:46 EDT 2026
groups.count=1
detector.name=Azure AD Canary
search.pattern="canary"\:"([^"]+)"
detector=sread
equivalency.name.family=AzureADTokens
platform=entra
