Azure REST API Command Execution

Darshan Thummar@Mighty

•updated Jun 11, 2026•0•0•3

This rule detects HTTP POST requests to the Azure management API (management.azure.com). A high volume of such requests (20 within 10 seconds from the same source) could indicate automated activity, potentially related to command execution or resource manipulation within an Azure environment.