Logging and monitoring

Missing alert for Network Security Groups creation/updating

Description

Monitoring for 'Create' or 'Update Network Security Group' events gives insight into network access changes and may reduce the time it takes to detect suspicious activity.
  • Recommended Mitigation

    Under Monitor -> Alerts, create an alert for 'Microsoft.Network/networkSecurityGroups/write'.