Detection rules › By event

Azure-Microsoft.Insights

Event	Rules
Microsoft.Insights/ActionGroups/Delete	1
Microsoft.Insights/AlertRules/Delete	1
Microsoft.Insights/DiagnosticSettings/Delete	3
Microsoft.Insights/MetricAlerts/Delete	1

Microsoft.Insights/ActionGroups/Delete

1 detection rules reference this event. View event page.

Panther (1)

Azure Action Groups Deleted severity informational T1685.002

Microsoft.Insights/AlertRules/Delete

1 detection rules reference this event. View event page.

Panther (1)

Azure Alert Rules Deleted severity medium T1685.002

Microsoft.Insights/DiagnosticSettings/Delete

3 detection rules reference this event. View event page.

Elastic (1)

Azure Diagnostic Settings Deleted severity medium T1685, T1685.002

Kusto (1)

Azure Diagnostic settings removed from a resource severity medium T1685, T1685.002

Panther (1)

Azure Diagnostic Settings Deleted severity medium T1685.002

Microsoft.Insights/MetricAlerts/Delete

1 detection rules reference this event. View event page.

Panther (1)

Azure Alert Rules Deleted severity medium T1685.002