Feb 06 2023 12:19 AM
Hi Techies,
Our SOC team got an alert where 25 VMs were deleted in a single session. The investigation logs in 365 Defender show that the VMs were successfully deleted the same was confirmed with the user who deleted those VMs.
But I still see those VMs as resources in the subscription. They are still there.
What could be the reason? Probably that it was not deleted properly. Please help.
Thanks :)
Feb 06 2023 03:48 AM
Solution