Bypassing logging feels relatively unimportant compared to some of the recent EntraID vulns we’ve seen
It takes a village of exploits to raise a successful and undetected attack.