Rare Subscription-level Operations In Azure
Identifies IPs from which users grant access to other users on azure resources and alerts when a previously unseen source IP address is used.
Sigma

Identifies IPs from which users grant access to other users on azure resources and alerts when a previously unseen source IP address is used.

Already have an account?