azure-activity-logs

Azure Activity Log Axe is a continually developing tool that simplifies the transactional log format provided by Microsoft. The tool leverages the "Axe Key," a method created by Nathan Eades of the Permiso P0 Labs team. The Axe Key provides a more consistent grouping of the transactional events of an operation than the traditional built-in Ids.

Building a Microsoft Sentinel detection rule for excessive Azure resource creation and deletion using the AzureActivity log and KQL. Triaging caller activity and working the incident to closure under NIST SP 800-61.

Azure log forwarder for fetching azure activity logs in realtime and send them to UDP over syslog.