Analytics Alerts
Browse the Cortex analytics alert reference.
1 alert match the current filters.
Download CSV Show ATT&CK heatmapAzure application removed Informational Cloud
An Azure application has been deleted.
- Activation:
- 14 Days
- Training:
- 30 Days
- Test:
- N/A (single event)
- Deduplication:
- 5 Days
ATT&CK tactics: Defense Evasion (TA0005)ATT&CK techniques: Hide Artifacts (T1564)Required data: Azure Audit LogAttacker's goals: Delete apps used for malicious activities.* Delete evidence of activity.Investigative actions: Check the Azure Portal for any changes in applications. Review the activities performed by the application.