Managed Sentinel – Alert 068
| Alert ID | MS-A068 |
| Alert Name | Mass secret retrieval from Azure Key Vault observed by a single user |
| Description | This alert identifies when a single user performs a large number of secret retrieval from Azure Key Vault. |
| Severity Level | Informational |
| Threat Indicator | |
| MITRE ATT&CK Tactics | Credential Access |
| Log sources | Azure Diagnostics |
| False Positives | |
| Recommendations |