AZ-011 Microsoft Azure

NSG flow logs are enabled.

NSG flow logs are enabled.

Domain
Microsoft Azure
Area
Networking
Automated / manual
Automated

Risk if it fails

No network telemetry = blind to attacks.

Without flow logs you cannot see suspicious connections or data leaving your network — you lose the ability to detect and investigate intrusions.

How Tess tests it

1 test — each concludes only on cited evidence.

NSG flow logs are enabled.

Automated
Procedure
Confirm flow logs configured on NSGs via Network Watcher.

Read-only command 

az network watcher flow-log list --location <region> -o table

More in Microsoft Azure

AZ-001 MFA is enforced for all users, especially privileged roles. AZ-002 Number of Global Administrators is limited (typically 2-4). AZ-003 Privileged Identity Management (PIM) provides just-in-time elevation. AZ-004 Legacy/basic authentication is blocked.

Want Tess to test AZ-011 against your evidence?

Book a demo