User Profile
AllenVisser
Copper Contributor
Joined 7 years ago
User Widgets
Recent Discussions
Re: Send an Email with Incident Details
howzit bud, in what platform is this incident log being produced? Is there information being produced in any log analytics workspace tables? Im happy to help you write a KQL query to monitor the respective table for a result (on a recurring trigger) and then send an email with the dynamic content you require eg username, email, ip. Kinda using the same principle on my blog from step 6. https://allenvisser.azurewebsites.net/2024/04/24/brute-force-attacks/ vote if you like, and respond if you wanna deep dive this 🙂638Views0likes0CommentsRe: Azure subscription owners
howzit bud, I have tested this script and it works 100% #Connect to Azure Connect-AzAccount #part 1 - Retrieves all subscriptions that your account has RBAC permissions to access as well as SCOPED to access across your tenant. #part 2 - Retrieves all the owners in each of the subscriptions via the RoleDefinitionId “8e3af657-a8ff-443c-a75c-2fe8c4bcb635” built-in Owner role. #part 3 - Exports to a file location of your choice (Ive tested in Azure cli, so from there, simply download onto your local device 🙂 # Hope my solution works for you 🙂 $sublist = Get-AzSubscription foreach ($item in $sublist) { $scopeappend = "/subscriptions/" + $item.Id $export = (Get-AzRoleAssignment -RoleDefinitionId "8e3af657-a8ff-443c-a75c-2fe8c4bcb635" -Scope $scopeappend | where { ($_.ObjectType -EQ "user") -and ($_.Scope -EQ $scopeappend) }) | select DisplayName, SignInName } $export | Export-Csv -Path ./owners.csv ##End of script###629Views0likes0Comments