Common Azure services to assist in the detection and mitigation of the abuse of cloud services

Azure budgets

Use _ to configure billing alerts and get notifications when certain

thresholds have been passed.

Azure AD

Use _ to configure who can authenticate and access your applications,

resources, and data.

Azure Monitor

Use _ to detect activities (for users, computers, service accounts, and

others) that might indicate the misuse of resources in your cloud environment.

Microsoft Defender for Cloud

Use _ to detect and send alerts about possible misuse

of resources in your cloud environment.

Azure WAF

Use _ to detect and protect against application-layer attacks.

Azure DDoS Protection

Use _ to detect and protect against DDoS attacks.

Azure NSGs

Use _ to configure inbound and outbound network access rules.

Azure Customer Lockbox

Use _ to detect login attempts by Microsoft

support engineers.

Azure Update Management

Use _ to automatically deploy security patches for

servers in your cloud environment.