Skip to content
Tools/SIT X-Ray/CSCAN-AZURE0060 Azure Storage Account Shared Access Signature

CSCAN-AZURE0060 Azure Storage Account Shared Access Signature

disabled5 patternsproximity 400recommended confidence 75 (medium)

Found Azure Storage Account Shared Access Signature in the document. Recommendation Action: Validate whether the file contains real secrets. If so, remove and roll the current secrets. Store new secrets in an approved store. For more information, please visit https://aka.ms/CEP

This SIT is marked disabled in Purview's built-in definitions. The definition is still worth reading, but Purview does not evaluate it, so it will never match anything in your tenant.

The patterns, as the engine reads them

confidence 75 (medium)
  • Primary: Regex_Scanner_SymmetricKey256_SymmetricKey_60068066_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
  • Not any of these:
    • Regex_Filter_TrivialMatch_8628710_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_TrivialHashKey_8628710_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_LocalSuppressionRule_10549531_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_PiiPlaceholder_27836922_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Keyword_Filter_CSCAN-AZURE0060_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
    • Regex_Filter_PropertyHashKey_3741682_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_Ambiguity_33675143_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
  • Required: Keyword_Ranker_CSCAN-AZURE0060_639ae0ab-b9c5-47a4-8e81-53fc6689f492_44223604_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
confidence 75 (medium)
  • Primary: Regex_Scanner_SymmetricKey256_SymmetricKey_60068066_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
  • Not any of these:
    • Regex_Filter_TrivialMatch_8628710_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_TrivialHashKey_8628710_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_LocalSuppressionRule_10549531_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_PiiPlaceholder_27836922_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Keyword_Filter_CSCAN-AZURE0060_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
    • Regex_Filter_PropertyHashKey_3741682_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_Ambiguity_33675143_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
  • Required: Regex_Ranker_CSCAN-AZURE0060_Code_f0227d5e-f4ab-4617-b396-f0250e331e69_26753075_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
confidence 75 (medium)
  • Primary: Regex_Scanner_SymmetricKey256UrlEncoded_SymmetricKey_39451090_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
  • Not any of these:
    • Regex_Filter_TrivialMatch_50632145_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Keyword_Filter_LocalSuppressionRule_53036123_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
    • Keyword_Filter_UiDefinition_7563067_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
    • Keyword_Filter_KeyVault_958745_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
    • Regex_Filter_TrivialMatch_8628710_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_TrivialHashKey_8628710_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_LocalSuppressionRule_10549531_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_PiiPlaceholder_27836922_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Keyword_Filter_CSCAN-AZURE0060_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
  • Required: Keyword_Ranker_CSCAN-AZURE0060_639ae0ab-b9c5-47a4-8e81-53fc6689f492_44223604_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
confidence 75 (medium)
  • Primary: Regex_Scanner_SymmetricKey512_Content_41731733_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
  • Not any of these:
    • Regex_Filter_TrivialMatch_8628710_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_TrivialHashKey_8628710_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_LocalSuppressionRule_10549531_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_PiiPlaceholder_27836922_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Keyword_Filter_CSCAN-AZURE0060_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
    • Keyword_Filter_Ambiguity_41421720_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
    • Keyword_Filter_AppInsights_41421720_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
  • Required: Keyword_Ranker_CSCAN-AZURE0060_639ae0ab-b9c5-47a4-8e81-53fc6689f492_44223604_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
confidence 75 (medium)
  • Primary: Regex_Scanner_SymmetricKey512_Content_41731733_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
  • Not any of these:
    • Regex_Filter_TrivialMatch_8628710_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_TrivialHashKey_8628710_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_LocalSuppressionRule_10549531_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Regex_Filter_PiiPlaceholder_27836922_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
    • Keyword_Filter_CSCAN-AZURE0060_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
    • Keyword_Filter_Ambiguity_41421720_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
    • Keyword_Filter_AppInsights_41421720_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
  • Any of these:
    • Keyword_Ranker_CSCAN-AZURE0060_HighRiskResource_fc890787-d776-49fa-8b0f-2de6c9db09bd_37251161_CEP2.0: keyword dictionary - Microsoft does not publish the full term list. It is summarised on this SIT’s Microsoft Learn page.
    • Regex_Ranker_CSCAN-AZURE0060_HighRiskResource_ResourceType_26753075_CEP2.0: a matching pattern Microsoft does not publish in full. The format is described on this SIT’s Microsoft Learn page.
Microsoft Learn definitionAll 350 built-in SITs →

Catalogue data reflects Microsoft's built-in SITs, which are the same in every tenant. This is a faithful simulation, not the live service, so confirm with the portal's SIT test before acting on a result.