Bulk Container Registry Pull Mining for Baked-in Credentials

Arnold Chan@slaz

•updated Sep 12, 2026•1•0•1

Detects high-volume image pull activity against an Azure Container Registry from a single identity, which may indicate reconnaissance or mass harvesting of container images to extract embedded credentials, secrets, or source code.