SOP-35: Azure Firewall Threat Intelligence Alert Response

SOC analyst SOP for Azure Firewall threat intelligence alerts. Covers TI-matched deny hits, false positive triage, and C2 confirmation.

2026-08-15T09:43:38.487Z
Rudra Verma, Senior Security Architect & Researcher