Intune as a Weapon Detecting Mass Device Wipe Attacks

How the Handala threat group turned Microsoft's own device management platform into a kill switch — wiping tens of thousands of corporate devices at Stryker — and how to detect this in Microsoft Sentinel before the damage compounds.