services / Azure / Snapshot Debugger snapshots

Snapshots produced by the Application Insights Snapshot Debugger, which capture an application's in-memory state (local variables, call stack, heap contents) at exception time.

Diagnostic memory captures of a single monitored application; commonly contain in-memory secrets, tokens, connection strings, and PII.

Microsoft.​Insights/​Snapshots/​Read

Reading snapshots exposes captured runtime memory of a monitored application, exfiltrating potentially sensitive in-process data and credentials.

Risks

1. Data exfiltration (CRITICAL)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links