Aakash RahsiMay 29, 20251 min readCloud Identity | “Ghost” Escalation Bypasses SIEM (M365, Entra, Defender)