
The #UserAuthenticationMethod field of the Microsoft 365 sign-in logs contains numeric values (16, 272, 33554432...) that were not documented anywhere.
I figured out that it's a bitfield, and recovered the meaning of most of the bits!

cryptopotato@cryptoishard
does everyone still know nothing about this? "UserAuthenticationMethod" is a black box
English