Azure Cost Question - how to control.

Hello - okay, so I am running through the various Learning Paths and Modules and am about 50% or so through the Azure Fundamentals.
I have created the resource groups, storage spaces, workspaces, private links, network gateways, firewalls, DNS zones, Key Vaults, LogAnalytics, Security Infrastructure, etc... as far as I have been able to and it seems solid to the point of being operational. I have not yet uploaded the data tables, or conformed them to migrate. Secure Score is high 90's, Compliance Score is high 80's, and a several different templates have been deployed from a variety of templates (HIPAA, CMS, HITECH, Privacy Acts, etc...) because of the industry standards. Sentinel has been deployed, Network Watchers, etc...

I set up an initial budget alert of $50 and $100 per month to eyeball the framework and see what and where the cost influences would be.....yes, that is a low amount considering, but again, I just want to eyeball the framework, with no data bases or tables inserted yet, to see what activity there is.

Initially, it was tracking $0.04 per month, $0.09, $0.18, then started moving a little more, but not much, when I started to construct the flows. I think it got to around $4/month.

Then, it appears it was a DDOS Protection flow I deployed, and it was in the Security resource group, where my costs just went straight up. Before I started troubleshooting, it had gone from the $4/month cost forecast, to around $8k/month....within around 2 days.

I have a strong understanding it is in the DDoS Protection area. And there were approximately 30 or so DNS that I had uploaded at that point.

My question is - how should I efficiently narrow in on the area where this "moonshot" in cost has been? If it is the DDoS Protection area, any guidance regarding what I can/should look at in order to curtail this, maybe with a switch type function, before anything is even loaded? Maybe throttle whatever it is?

Also - adding this in, and not sure how relevant it would be.
I did check the Azure Advisor, and there were no recommendations at all....I thought that was interesting, but then again, maybe not, partly because the migration of data had not yet been deployed.

Thank you so much.....very much appreciated.