SOP-20: Service Principal & App Registration Abuse Response

SOC analyst SOP for detecting and containing malicious client secrets, certificate credentials, and API permissions added to Azure AD service principals and app registrations.