Skip to content

Azure Activity Log

Named by 2 kept items in this workspace.

Search every workspace for Azure Activity Log. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • writeup2024-03-15

    Used by the author/investigators to inspect operations performed on the Resource group and Batch account.

  • writeup2022-05-04

    Defensive logging source for detecting VM execution techniques (e.g. 'Run Command on Virtual machine', 'Create or Update Virtual Machine Extension', 'Create an Azure Automation Job')

All technologies in this workspace.