Azure Blob Storage Bulk List Operations - T1619 Discovery

Ankit Mehta@Secvyn

•updated Jun 26, 2026•0•0•7

Detects an unusually high frequency of storage blob and container listing operations within a short time window. This behavior often indicates an attempt to enumerate the contents of Azure Blob Storage, which may be a precursor to data discovery or exfiltration.