- 필수 기능
- 앱 내
- 서비스 관리
- 인프라스트럭처
- 애플리케이션 성능
- 디지털 경험
- 소프트웨어 제공
- 보안
- 로그 관리
- 관리
- 인프라스트럭처
- ci
- containers
- csm
- ndm
- otel_guides
- overview
- slos
- synthetics
- tests
- 워크플로
Set up the azure integration.
Detect when an Azure disk is successfully exported. Export URLs generated in Azure are accessible to anyone with the URI. This could be utilized as an exfiltration method that would allow an attacker to download an Azure Compute VM’s disk as a VHD file.
Monitor Azure logs where @evt.name
is "MICROSOFT.COMPUTE/DISKS/BEGINGETACCESS/ACTION"
and @evt.outcome
is Success
.
{{@resourceId}}
) has a legitimate reason for being exported.{{@network.client.ip}}
) creating the export URI.2 November 2022 - Updated strategy.