Detections tagged with AzureActivity

Jan 21, 2025 AzureActivity - VM: Password Reset through EnableAccess VM Extension
#KQL#Sentinel#AzureActivity#Azure VM#T1651
Jan 22, 2025 AzureActivity - VM: Azure Run Command Started On VM
#KQL#Sentinel#AzureActivity#Azure VM#T1651
Jan 30, 2025 Azure Activity: Diagnostic Setting Deleted
#KQL#Sentinel#AzureActivity#T1562.008
Jan 31, 2025 Azure Activity: Diagnostic Setting Modified
#KQL#Sentinel#AzureActivity#T1562.008