Azure Storage Account Keys Listed by a Non-Automation Identity

Daniel Jeremiah@daniyyell

•updated Jun 21, 2026•1•0•6

Detects successful retrieval of storage account access keys by a user identity rather than an established deployment or backup service. This activity can indicate an attacker attempting to gain access to sensitive data stored in Azure Storage Accounts.