ingest-nsg-flow-logs-azure-ocsf

Use when

• You have Azure NSG Flow Logs from Network Watcher exports
• You need OCSF Network Activity output
• You want parity with AWS VPC Flow Logs and GCP VPC Flow Logs ingestors

Do NOT use

• On Azure Activity Log events
• On Defender for Cloud alerts
• As a detector or remediation skill

Input

JSON or JSONL of Azure NSG Flow Logs export payloads. The skill walks: