Azure Virtual Network Subnets Administrative Operations

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index

Identifies a set of Azure Virtual Network Subnets for administrative and operational detection queries for hunting activities.

Attribute Value
Type Hunting Query
Solution Azure Activity
ID 57784ba5-7791-422e-916f-65ef94fe1dbb
Severity Low
Tactics Impact
Techniques T1496
Required Connectors AzureActivity
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
AzureActivity ActivitySubstatusValue in "Accepted,Created"
CategoryValue == "Administrative"		 ✗ ✗ ✗

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Hunting Queries · Back to Azure Activity