Anomalous Resource Creation and related Network Activity — Solutions Analyzer

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index

Indicates when an anomalous number of resources are created in Azure via AzureActivity log. Resource creation could indicate malicious or spurious use of your Azure Resource allocation.

Attribute	Value
Type	Hunting Query
Solution	Standalone Content
ID	`ac25d05d-362d-4a8d-b4e7-58c0edd2379c`
Tactics	Impact
Techniques	T1496
Required Connectors	AzureActivity, AzureNetworkWatcher
Source	[View on GitHub](https://github.com/Azure/Azure-Sentinel/blob/master/Hunting Queries/MultipleDataSources/AzureResourceCreationWithNetworkActivity.yaml)

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Hunting Queries