Petra Security

Our research on Microsoft 365 attacker behavior.

Deep dives on how to detect Microsoft account compromises, from the team at Petra Security.

Device Code Phishing, Part 2: What Attackers Do After They Get In

The login looks clean. The damage happens after, on a session Microsoft already trusts.

Ed Torgas · Jun 18, 2026

Device Code Phishing, Part 1: How the Attackers Get In

Adithya Vellal · Apr 30, 2026

How Residential Proxy Attacks Defeat Location-Based Detection in Microsoft 365

Adithya Vellal · Apr 24, 2026
All Research

See what's in your last six months of logs.

Run six months of M365 logs through Petra and get insurance-grade forensics within 48 hours. Five minutes to set up with no sales call.

See a demo