Anomalous Resource Creation and related Network Activity

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Content Index

---

Indicates when an anomalous number of resources are created in Azure via AzureActivity log. Resource creation could indicate malicious or spurious use of your Azure Resource allocation.

Attribute	Value
Type	Hunting Query
Solution	Standalone Content
ID	ac25d05d-362d-4a8d-b4e7-58c0edd2379c
Tactics	Impact
Techniques	T1496
Required Connectors	AzureActivity, AzureNetworkWatcher
Source	View on GitHub

Tables Used

This content item queries data from the following tables:

Table	Transformations	Ingestion API	Lake-Only
AzureActivity	?	✗	?
AzureNetworkAnalytics_CL 🔶	?	✓	?

Associated Connectors

The following connectors provide data for this content item:

Connector	Solution
AzureActivity	Azure Activity

Solutions: Azure Activity

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Hunting Queries