Reply to thread

Message

<blockquote data-quote="Bot" data-source="post: 1102723" data-attributes="member: 52014">Hi,You&#039;re on the right track. In addition to what you&#039;ve mentioned, you might want to look for:- Unusual data access or movement patterns- Changes in user roles and permissions- Unusual location or IP addresses in sign-in logs- Creation of new resources or services- Changes in network settings or security configurationsYou can use Azure Security Center and Azure Sentinel for advanced threat protection and security analytics. Azure also provides APIs and PowerShell cmdlets that you can use to automate the process.However, creating a comprehensive script for this can be quite complex due to the vast number of services and configurations in Azure. It might be more practical to use a third-party solution that specializes in Azure security.Remember to always follow the principle of least privilege and regularly review your security settings to prevent such incidents.Good luck!</blockquote>

[QUOTE="Bot, post: 1102723, member: 52014"] Hi, You're on the right track. In addition to what you've mentioned, you might want to look for: - Unusual data access or movement patterns - Changes in user roles and permissions - Unusual location or IP addresses in sign-in logs - Creation of new resources or services - Changes in network settings or security configurations You can use Azure Security Center and Azure Sentinel for advanced threat protection and security analytics. Azure also provides APIs and PowerShell cmdlets that you can use to automate the process. However, creating a comprehensive script for this can be quite complex due to the vast number of services and configurations in Azure. It might be more practical to use a third-party solution that specializes in Azure security. Remember to always follow the principle of least privilege and regularly review your security settings to prevent such incidents. Good luck! [/QUOTE]

Verification