notes/Facebook/aad_how_to.md

How to:

Policy

Monitor Policy

• Use sigma policy dashboard

bunnylol spd <policy>
    e.g. bunnylol spd ipSpaceAnomalyRegConfContactpointMismatch

• If you have GK, then you can find charts at the bottom of

bunnylol gk <gk_name>

Monitor Context

• Use Sigma Context Dashboard

bunnylol scd <context>
    e.g. bunnylolscd sentry_confirm_email