Azure Cloud Resource Hierarchy Modification

Ankit Mehta@Secvyn

•updated Jun 26, 2026•0•0•1

This rule detects successful administrative actions related to the creation, deletion, or modification of Azure Management Groups, Subscriptions, and resources within them. Such actions can indicate unauthorized structural changes to the environment, potential privilege escalation, or attempts to modify tenant-level governance.