The Activity Log
We explain how the Activity Log records every infrastructure change in Azure including who made changes and when, enabling security audits, detection of suspicious administrative actions outside normal hours, and tracking resource creation, modification, and deletion events.