Bulk Azure Storage Account deletion burst by single principal

Arnold Chan@slaz

•updated Sep 27, 2026•0•0•2

Detects rapid, large-scale deletion of Azure storage accounts by a single identity within a short timeframe. This behavior is indicative of destructive activity, such as a malicious actor attempting to disrupt service availability or impact organizational data, rather than typical administrative teardown.