Azure Storage Account Key Access Spike

Ankit Mehta@Secvyn

•updated Jun 30, 2026•2•0•2

Detects a spike in successful operations related to Azure Storage Account Keys by a single caller within a one-hour window. This could indicate an adversary attempting to enumerate, access, or exfiltrate storage account keys, or a legitimate user performing multiple key management activities.