A collection of ARM-based detections for Azure/AzureAD based TTPs - View it on GitHub