All Detections

Storage Account Key Enumeration

Azure Sentinel@AzureSentinel
updated Jun 17, 2025280118

'This query identifies attackers trying to enumerate the Storage keys as well as updating roles using AzureActivity,SigninLogs and AuditLogs'

Microsoft Sentinel (KQL)