Skip to content
Threat Feed
Subscribe

Product

Azure Network Watcher

2 briefs RSS
medium advisory

Azure VNet Full Network Packet Capture Enabled

Detection of Azure Network Watcher's Packet Capture feature being enabled, potentially indicating malicious network sniffing for credential access and discovery of sensitive data in unencrypted traffic.

Azure +1 network-sniffing credential-access
3r 2t
medium advisory

Azure Network Watcher Deletion for Defense Evasion

An adversary may delete an Azure Network Watcher to impair defenses by disabling network monitoring and logging capabilities, as detected by monitoring Azure activity logs for Network Watcher deletion events.

Azure Network Watcher cloud azure defense-evasion
2r 2t