Query: Resource logs in Event Hub should be enabled

Description

Audit enabling of resource logs. This enables you to recreate activity trails to use for investigation purposes; when a security incident occurs or when your network is compromised.

Query

Tables used in this query:

• azure_eventhub_namespace
• azure_subscription

Controls using this query:

• Resource logs in Event Hub should be enabled

SQL