High-Risk User Accessing Storage Account Keys

Mehulkumar Savajani@Msavajani

•updated Jan 29, 2026•4•0•71

Detects when a user flagged as 'high risk' by Azure AD Identity Protection lists storage account keys. This could indicate a compromised account is being used to access sensitive data or escalate privileges.