Product
medium
advisory
Azure Event Hub Deletion for Defense Evasion
2 rules 2 TTPsDetection of Azure Event Hub deletion, indicative of defense evasion by adversaries seeking to disrupt data flow and evade detection by erasing log evidence.
Azure Event Hub
cloud
azure
defense-evasion
2r
2t
medium
advisory
Azure Event Hub Authorization Rule Created or Updated
2 rules 2 TTPsCreation or modification of Azure Event Hub authorization rules can indicate unauthorized access or privilege escalation by adversaries using cryptographic keys to manage access to event hubs.
Azure Event Hub
cloud
azure
persistence
account-manipulation
2r
2t