Detection rules › By event

Azure-Microsoft.EventHub

Event	Rules
Microsoft.EventHub/namespaces/authorizationRules/write	1
Microsoft.EventHub/namespaces/eventhubs/Delete	2

Microsoft.EventHub/namespaces/authorizationRules/write

1 detection rules reference this event. View event page.

Elastic (1)

Azure Event Hub Authorization Rule Created or Updated severity medium T1098, T1098.003, T1552, T1552.005

Microsoft.EventHub/namespaces/eventhubs/Delete

2 detection rules reference this event. View event page.

Elastic (1)

Azure Event Hub Deleted severity medium T1485, T1685, T1685.002

Panther (1)

Azure Event Hub Deleted severity high T1685.002