https://azure.microsoft.com/en-us/blog/leverage-azure-security-center-to-detect-when-compromised-lin...
"When an attacker compromises a machine, they typically have a goal in mind. Some attackers are looking for information residing on the victim’s machine or are looking for access to other machines on the victim’s network. Other times, attackers have plans to use the processing power of the machine itself or even use the machine as a launch point for other attacks."
