← Back to Explore
kqlHunting
Azure Subscription Budget Deletion
Detection Query
AzureActivity
| where OperationNameValue == "MICROSOFT.CONSUMPTION/BUDGETS/DELETE" or OperationNameValue == "MICROSOFT.COSTMANAGEMENT/BUDGETS/DELETE"Data Sources
AzureActivity
Tags
azure
Raw Content
AzureActivity
| where OperationNameValue == "MICROSOFT.CONSUMPTION/BUDGETS/DELETE" or OperationNameValue == "MICROSOFT.COSTMANAGEMENT/BUDGETS/DELETE"