domains / families / security / analyzing-azure-activity-logs-for-threats

analyzing-azure-activity-logs-for-threats

separate

'Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query

When to use

• When investigating security incidents that require analyzing azure activity logs for threats
• When building detection rules or threat hunting queries for this domain
• When SOC analysts need structured procedures for this analysis type
• When validating security monitoring coverage for related attack techniques

Skill page

Source