Detections tagged with T1555.006

Jan 6, 2025 2025-01-06: Azure Key Vault - New IP Address Added to Key Vault Firewall
#KQL#Sentinel#Azure Key Vault#T1562.007#T1555.006
Jan 7, 2025 Azure Key Vault - Vault Access Configuration Modified
#KQL#Sentinel#Azure Key Vault#Misconfiguration#T1555.006#T1556
Jan 8, 2025 Azure Key Vault - Large Number of Keys, Secrets, Certs Deleted
#KQL#Sentinel#Azure Key Vault#T1555.006#T1485
Jan 9, 2025 Azure Key Vault - Large Number of Keys, Secrets, or Certs Accessed
#KQL#Sentinel#Azure Key Vault#T1555.006
Jan 10, 2025 Azure Key Vault - Potential Privilege Escalation Activity
#KQL#Sentinel#Azure Key Vault#T1555.006#T1556
Jan 19, 2025 Azure Key Vault - User Adds Themselves to a Vault Access Policy
#KQL#Sentinel#Azure Key Vault#Misconfiguration#T1555.006#T1556