1200KM / tag
activitylogs — logsource-service tag
28 related reference pages for logsource-service: activitylogs.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- Azure Active Directory Hybrid Health AD FS New Server · sigma-rule
- Azure Active Directory Hybrid Health AD FS Service Delete · sigma-rule
- Azure Application Deleted · sigma-rule
- Azure Container Registry Created or Deleted · sigma-rule
- Azure Device or Configuration Modified or Deleted · sigma-rule
- Azure DNS Zone Modified or Deleted · sigma-rule
- Azure Firewall Modified or Deleted · sigma-rule
- Azure Firewall Rule Collection Modified or Deleted · sigma-rule
- Azure Key Vault Modified or Deleted · sigma-rule
- Azure Keyvault Key Modified or Deleted · sigma-rule
- Azure Keyvault Secrets Modified or Deleted · sigma-rule
- Azure Kubernetes Admission Controller · sigma-rule
- Azure Kubernetes Cluster Created or Deleted · sigma-rule
- Azure Kubernetes CronJob · sigma-rule
- Azure Kubernetes Events Deleted · sigma-rule
- Azure Kubernetes Network Policy Change · sigma-rule
- Azure Kubernetes RoleBinding/ClusterRoleBinding Modified and Deleted · sigma-rule
- Azure Kubernetes Secret or Config Object Access · sigma-rule
- Azure Kubernetes Sensitive Role Access · sigma-rule
- Azure Kubernetes Service Account Modified or Deleted · sigma-rule
- Azure Network Firewall Policy Modified or Deleted · sigma-rule
- Azure New CloudShell Created · sigma-rule
- Azure Subscription Permission Elevation Via ActivityLogs · sigma-rule
- Disabled MFA to Bypass Authentication Mechanisms · sigma-rule
- Granting Of Permissions To An Account · sigma-rule
- Number Of Resource Creation Or Deployment Activities · sigma-rule
- Rare Subscription-level Operations In Azure · sigma-rule
- User Added to an Administrator's Azure AD Role · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.