Azure Virtual Machines
Named by 4 kept items in this workspace.
Search every workspace for Azure Virtual Machines. It matches the name as written, so it can find other things that share it.
The items that name it 4
Enumerated during discovery phase
Windows and Linux VMs; techniques run as SYSTEM/root privileges by default
userData property abused; IMDS REST API accessible internally without authentication
Windows VMs; abused via userData property and IMDS to enable alternative data channel command execution
All technologies in this workspace.