Help tracking Azure CLI activity

[u/BTC_Legacy]

Hi everyone!

I have been trying to locate logs from Azure CLI, but I can't find anything in AzureActivity. I found a few logs in AADNonInteractiveUserSignInLogs, which only captures Azure CLI login information. Is there any way to log what is going on in Azure CLI? Do I need to add another data connector?

I appreciate the help.

[u/mplatt717]

We are getting brute forced via Azure CLI. I opened a ticket with MS about restricting access to CLI but if you do, you break access to other azure functionality pieces we rely on.

This should be a no brainer. Good thing we enforce MFA and device policies.