Microsoft Sentinel low experimental kql

Cyble Vision Alerts New Vulnerability Detected

'A newly detected CVE has been associated with a monitored keyword or asset. This may indicate exposure to newly published or exploited vulnerabilities.'

View Source

Detection Logic

Alerts_new_vulnerability
| where Service == "new_vulnerability"
| extend MappedSeverity = Severity

Field Validations

Loading…

Comments (0)

Loading comments...