Netskope Threat Labs

APP-DETECT Traffic to Azure Blob Storage Snapshot

IPS-SWG

1 SID: 153007

Detects requests to Azure Blob Storage endpoints (.blob.storage.azure.net) that request a disk snapshot through the snapshot query parameter. Snapshots capture the full state of an Azure managed disk at a point in time, so this traffic can reflect routine backups, or an attempt to copy a virtual machine disk out of the environment.

No cross-references or related blog posts found for this signature.