Cloud Provisioning Activity From Previously Unseen IP Address
This search looks for cloud provisioning activities from previously unseen IP addresses. Provisioning activities are defined broadly as any event that runs or creates something.
This content is not mapped to any local saved search. Add mapping
Cloud Provisioning Activity From Previously Unseen IP Address Help
You must be ingesting your cloud infrastructure logs from your cloud provider. You should run the baseline search
Open in Search