Azure Virtual Machines Threats Detection Events

Events

• Microsoft.ClassicCompute.register.action
• Microsoft.ClassicCompute.virtualMachines.read
• Microsoft.ClassicCompute.virtualMachines.write
• Microsoft.ClassicCompute.virtualMachines.delete
• Microsoft.ClassicCompute.virtualMachines.start.action
• Microsoft.ClassicCompute.virtualMachines.stop.action
• Microsoft.ClassicCompute.virtualMachines.shutdown.action
• Microsoft.Compute.register.action
• Microsoft.Compute.unregister.action
• Microsoft.Compute.availabilitySets.write
• Microsoft.Compute.availabilitySets.delete
• Microsoft.Compute.cloudServices.write
• Microsoft.Compute.cloudServices.delete
• Microsoft.Compute.cloudServices.poweroff.action
• Microsoft.Compute.cloudServices.start.action
• Microsoft.Compute.cloudServices.roles.write
• Microsoft.Compute.diskAccesses.write
• Microsoft.Compute.diskAccesses.delete
• Microsoft.Compute.disks.write
• Microsoft.Compute.disks.delete
• Microsoft.Compute.hostGroups.write
• Microsoft.Compute.hostGroups.delete
• Microsoft.Compute.images.write
• Microsoft.Compute.images.delete
• Microsoft.Compute.sharedVMExtensions.write
• Microsoft.Compute.sharedVMExtensions.delete
• Microsoft.Compute.snapshots.write
• Microsoft.Compute.snapshots.delete
• Microsoft.Compute.sshPublicKeys.write
• Microsoft.Compute.sshPublicKeys.read
• Microsoft.Compute.sshPublicKeys.delete
• Microsoft.Compute.sshPublicKeys.generateKeyPair.action
• Microsoft.Compute.virtualMachines.write
• Microsoft.Compute.virtualMachines.delete
• Microsoft.Compute.virtualMachines.start.action
• Microsoft.Compute.virtualMachines.poweroff.action
• Microsoft.Compute.virtualMachines.restart.action
• Microsoft.Compute.virtualMachines.deallocate.action
• Microsoft.Compute.virtualMachines.extensions.write
• Microsoft.Compute.virtualMachines.extensions.delete
• Microsoft.ServiceFabric.clusters.write
• Microsoft.ServiceFabric.clusters.delete
• Microsoft.ServiceFabric.managedclusters.write
• Microsoft.ServiceFabric.managedclusters.delete