Azure RBAC role assignment enumeration for Contributor-scoped permissions
Detects successful read operations of Azure role assignments where the response or properties involve the 'Contributor' role, potentially indicating reconnaissance of highly privileged access within the subscription.
Microsoft Sentinel (KQL)

