search

microsoft / Azure-Threat-Research-Matrix

MIT License
70 stars 23 forks source link

Incorrect information about AZR501.3 detection query #15

Open Palciny opened 11 months ago

Palciny commented 11 months ago

Documented query will not fetch any results.

AzureActivity | where Properties_d has 'vmaccesswindowspasswordreset'

Log vmaccesswindowspasswordreset is not present in Properties_d.