services / Azure / Log Analytics export job

Exports data from a workspace for a given query and time range as a one-off bulk job.

A bulk read-out of stored log data for arbitrary queries/time ranges; logs may contain sensitive organizational data, so exporting them is HIGH.

Microsoft.​OperationalInsights/​workspaces/​jobs/​export/​action

Bulk-exports stored logs by query and time range, pulling out telemetry that can include credentials, tokens, and other sensitive data captured in logs.

Risks

1. Data exfiltration (CRITICAL)
2. Logs exfiltration (MEDIUM)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links