Azure NSG Rule Modified to Allow Any Source IP

Paul For AI Use Only@foraiuseonly666

•updated Jul 15, 2025•19•6•228

This rule detects the modification of an Azure Network Security Group (NSG) rule to allow traffic from any source IP address ('*'). This configuration change significantly broadens network access and could indicate an adversary attempting to establish persistence, enable command and control, or facilitate data exfiltration by opening up previously restricted network paths.