Azure Activity Logs
Named by 2 kept items in this workspace.
Search every workspace for Azure Activity Logs. It matches the name as written, so it can find other things that share it.
The items that name it 2
Log source recommended for monitoring VM Run Command API calls to detect potential container-escape attacks on managed Kubernetes nodes.
Source of audit-log telemetry for cloud ITDR behavioral baselining and detection
All technologies in this workspace.