This commit is contained in:
Ashwin Patil 2020-09-01 12:53:33 -07:00
Родитель 459283bd2d
Коммит 3bc8fb1d78
1 изменённых файлов: 2 добавлений и 2 удалений

Просмотреть файл

@ -1,7 +1,7 @@
id: 9736e5f1-7b6e-4bfb-a708-e53ff1d182c3
name: Creation of expensive computes in Azure
description: |
'Looks for creation of large size/expensive VMs (GPU or with large no of virtual CPUs) in Azure.
'Identifies the creation of large size/expensive VMs (GPU or with large no of virtual CPUs) in Azure.
Adversary may create new or update existing virtual machines sizes to evade defenses
or use it for cryptomining purposes.
For Windows/Linux Vm Sizes - https://docs.microsoft.com/azure/virtual-machines/windows/sizes
@ -11,7 +11,7 @@ requiredDataConnectors:
dataTypes:
- AzureActivity
queryFrequency: 1d
queryPeriod: 14d
queryPeriod: 1d
triggerOperator: gt
triggerThreshold: 1
tactics: