Suspicious Azure Key Vault Secret Access or IOC Activity

Detects potential credential theft or reconnaissance against Azure Key Vault by identifying bulk secret retrieval activities across multiple vaults or any Key Vault activity originating from known indicator of compromise (IOC) IP addresses.