Azure Activity Log is a great tool for auditing resources in your subscription. For example, you can check who (and when) has created or stopped a Virtual Machine.
For many events, it is quite obvious what happened – Start/Stop VM events don’t require more explanation. But it is not the case for the “update” event. For me, it was always hard to find out what really has changed.