Detection rules › By catalog entry

Azure-Microsoft.KeyVault

Catalog entry	Rules
Microsoft.KeyVault/locations/deletedVaults/purge/action	1
Microsoft.KeyVault/vaults/accessPolicies/write	1
Microsoft.KeyVault/vaults/delete	2
Microsoft.KeyVault/vaults/deploy/action	1
Microsoft.KeyVault/vaults/secrets/write	1
Microsoft.KeyVault/vaults/write	1

Microsoft.KeyVault/locations/deletedVaults/purge/action

1 detection rules reference this catalog entry. View catalog entry.

Panther (1)

Azure Key Vault Permanently Purged severity low T1485,T1490

Microsoft.KeyVault/vaults/accessPolicies/write

1 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Azure Key Vault Modified or Deleted severity medium T1552,T1552.001

Microsoft.KeyVault/vaults/delete

2 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Azure Key Vault Modified or Deleted severity medium T1552,T1552.001

Panther (1)

Azure Key Vault Deleted severity medium T1485,T1490

Microsoft.KeyVault/vaults/deploy/action

1 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Azure Key Vault Modified or Deleted severity medium T1552,T1552.001

Microsoft.KeyVault/vaults/secrets/write

1 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Azure Keyvault Secrets Modified or Deleted severity medium T1552,T1552.001

Microsoft.KeyVault/vaults/write

1 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Azure Key Vault Modified or Deleted severity medium T1552,T1552.001

Back to all Azure-Microsoft.KeyVault catalog entries