Home / Stories / Topic

AzureActivity

Topic • 1 Story

Related: KQL Cloud Security Azure DevSecOps Entra ID Microsoft Sentinel AI Security Threat Hunting

Dikshant Lather · Sep 25, 2026

Identifying Rogue Azure Subscription Role Assignments and Privilege Escalation

Monitor high-privilege Azure RBAC grant operations (Owner, Contributor, User Access Administrator) in AzureActivity logs using proactive KQL alert rules.

Cloud Security 2 min read

0 0

Identifying Rogue Azure Subscription Role Assignments and Privilege Escalation