Skip to content

Instantly share code, notes, and snippets.

@fabiocannas

fabiocannas/AZKVAuditLogs_CheckForSecretExpiry.kql

Created December 9, 2024 15:48
Show Gist options
  • Save fabiocannas/7d87d857ecdbfadf3d36df321d5c0b0b to your computer and use it in GitHub Desktop.
Save fabiocannas/7d87d857ecdbfadf3d36df321d5c0b0b to your computer and use it in GitHub Desktop.
Download ZIP
AZ KV Audit Logs - Check for secret expiry
Raw
AZKVAuditLogs_CheckForSecretExpiry.kql
AzureDiagnostics
| where OperationName contains "SecretNearExpiry" or OperationName contains "SecretExpired"
//| project SecretName = column_ifexists("eventGridEventProperties_data_ObjectName_s", "eventGridEventProperties_data_ObjectName_s")
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment