ITDR Incident reports do not include the Entra Correlation/Request IDs for the sign-ins that are reported as malicious. This makes correlating the malicious activity in Entra harder than it needs to be.

This change will allow customers to better understand the IoCs whether false positive or true positive.