Azure Service Principal Created

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•24

Identifies when a service principal is created in Azure. This activity can be an indicator of an adversary establishing persistence or preparing for further actions within the Azure environment.