Monitoring for create or update storage account events gives insight into the changes made within your cloud environment regarding storage accounts and can help reduce the time for detecting unauthorized activity.
Recommended Mitigation
Under Monitor -> Alerts, create an alert for 'Microsoft.Storage/storageAccounts/write'
Logging and monitoring
