Azure Resource Group Inventory Enumerated

Darshan Thummar@Mighty

•updated Jun 12, 2026•0•0•2

This rule detects repeated HTTP requests to 'management.azure.com' with the URI '/resources', indicating an attempt to enumerate Azure resource groups. The threshold of 10 requests within 30 seconds from the same source is set to identify potential scanning or reconnaissance activities.