All Detections

Azure Storage Account ListKeys Action

avatar
Ibrahim Saud@tektrix
updated Jun 18, 2026006

Detects extraction of Azure Storage account keys (ListKeys) used to facilitate programmatic, static-auth data exfiltration.

Microsoft Sentinel (KQL)