Azure Monitor for VMs has a new data set for bound ports
Updated: June 10, 2019
The VMBoundPort data set is now available for Azure Monitor for VMs customers in all supported Log Analytics workspace regions, including East US and West Europe.
VMBoundPort contains information for all of the ports that accepted incoming traffic or could potentially support traffic during the reporting window. We have also included new workbooks named Active Ports and Open Ports to view this information from Azure Monitor for VMs. This allows you to analyze which ports are open and active in support of security analysis and troubleshooting scenarios.