Azure VM Run Command executed from Azure IP address

Description

As part of content migration, this file is moved to new location. you can find here: https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Activity/Hunting%20Queries/AzureRunCommandFromAzureIP.yaml

Rule logic

Source file
Raw source Azure VM Run Command executed from Azure IP address · KQL
Esc
Published by Azure/Azure-Sentinel ↗, licensed under MIT ↗. Reproduced here unmodified. 
id: 8c076f9f-ebc5-4018-8795-e1ed4879f68e
name: Azure VM Run Command executed from Azure IP address
description: 'As part of content migration, this file is moved to new location. you can find here: https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Activity/Hunting%20Queries/AzureRunCommandFromAzureIP.yaml'

Detection rules belong to the projects that publish them and remain under their own licenses. This site indexes and links to them; it claims no rights in them.