Tag
low
advisory
Azure Automation Runbook Created or Modified
2 rules 2 TTPsAn adversary may create or modify an Azure Automation runbook to execute malicious code and maintain persistence in their target's environment, detected through Azure activity logs.
Azure Automation
azure
automation
runbook
execution
persistence
2r
2t
high
advisory
Azure Runbook Webhook Creation Detected
2 rules 1 TTPDetection of a new Azure Automation Runbook Webhook creation, potentially leading to unauthorized access and control over Azure resources by enabling unauthenticated URL triggers.
Azure Automation
azure
runbook
webhook
persistence
2r
1t