Azure Container Instance Deployment from Compromised Registry Image
Detects the deployment of an Azure Container Instance (ACI) where the image source or container name matches identified indicators of a potentially compromised registry or unauthorized deployment pattern.
Sigma
