SOP-42: Azure Resource Group Deletion Response

SOC analyst SOP for suspicious Azure resource group deletion events. Covers destruction triage, RBAC privilege path analysis, and blast radius assessment.