Manual Execution of ACR Task via 'az acr task run' CLI Command

Duo Tech@duotech

•updated Jul 15, 2026•0•0•2

Detects the manual execution of an Azure Container Registry (ACR) task using the 'az acr task run' command. This could indicate an adversary attempting to leverage ACR build capabilities to execute malicious build steps, pull images, or perform unauthorized automation tasks within the container registry environment.