Hi
In a recent security BLOG Microsoft have advised alerts should be configured [in Azure tenancy] to prompt review on high-risk modification of tenant configuration, including but not limited to:
Modification of Azure AD roles and privileged users associated with those roles.
Modification of tenant-wide security configurations.
Can someone please provide me with some examples of the rules mentioned?
@DavidWrafter-8948 - Did the below answer help resolve your issue, if not please revert back with any questions.
and if it did, please feel free to "accept as answer" so it can be beneficial to the community.
Azure monitor has built-in templates for Azure Activity alerts. You also have tools like Azure AD Identity Protection, Defender for Cloud, and Sentinel that can help to address this requirement. https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/activity-log-alerts
14 people are following this question.
