Microsoft Sentinel high experimental kql

Cynerio - Exploitation Attempt of IoT device

Exploitation Attempt of IoT device - Attack detection

View Source

Detection Logic

CynerioEvent_CL
| where TimeGenerated > ago(24h)
| where module_s == 'IDS'
| where title_s == 'Exploitation Attempt'

Field Validations

Loading…

Comments (0)

Loading comments...