Once your packet capture session has completed, the capture file is uploaded to blob storage or to a local file on the virtual machine. The storage location of the packet capture is defined during creation of the packet capture. Reference: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-packet-capture- manage-portal