Need assistance w generating a KQL query to identify settings in Azure

Hi Deleted
Creating KQL queries for Azure Resource Graph can help you identify specific resource configurations. Here are the queries you requested:

1. Storage accounts with "Enabled from all networks":

```kql
Resources
| where type =~ "microsoft.storage/storageaccounts"
| extend properties = parse_json(properties)
| extend allowAll = iif(properties.networkAcls.defaultAction == "Allow", "Enabled from all networks", "Not enabled from all networks")
| where allowAll == "Enabled from all networks"
| project name, resourceGroup, type, allowAll
```

2. Container registries with "All networks" for Public network access:

```kql
Resources
| where type =~ "Microsoft.ContainerRegistry/registries"
| extend properties = parse_json(properties)
| extend publicAccess = iif(properties.publicNetworkAccess == "Enabled", "All networks", "Not all networks")
| where publicAccess == "All networks"
| project name, resourceGroup, type, publicAccess
```

3. Route tables with default route 0.0.0.0/0 via the Internet:

```kql
Resources
| where type =~ "Microsoft.Network/routeTables"
| extend properties = parse_json(properties)
| mv-expand rules = properties.routes
| extend rule = parse_json(rules)
| where rule.addressPrefix == "0.0.0.0/0" and rule.nextHopType == "Internet"
| project name, resourceGroup, type, ruleName = rule.name, addressPrefix = rule.addressPrefix, nextHopType = rule.nextHopType
```

These KQL queries can be executed in the Azure Resource Graph Explorer or Azure Monitor Logs to help you identify the desired resources and configurations. Make sure to adjust the queries if you have specific requirements or if the property names change in the future.