Hunt for compromised Azure subscriptions using Microsoft Defender for Cloud Apps

One of our customers suffer this attack. As partners, we had alerts configured to prevent this. However, those alerts didn't work, and the bill went from 300 USD/month on average to 188K USD. That amount is jeopardizing our company and Microsoft provides no help or investigation of any kind.

Having a Microsoft Azure subscription is a huge risk, as there are no effective ways to protect us as partners. And, as is known, 90% of M365 Tenants have security gaps.

https://www.businesswire.com/news/home/20221115006497/en/9-out-of-10-Enterprises-Have-Vulnerabilities-in-their-Microsoft-365-Security-Configurations