Azure Container Registry Image Push Operation

Duo Tech@duotech

•updated Jul 15, 2026•2•0•4

Detects push operations to an Azure Container Registry. This activity is a common administrative task but can also indicate an adversary pushing a malicious, backdoored, or unauthorized container image into an environment, potentially for persistence or supply chain attack purposes.