Microsoft Sentinel high experimental kql

Cynerio - IoT - Default password

User signed in using default credentials

View Source

Detection Logic

CynerioEvent_CL
| where TimeGenerated > ago(24h)
| where module_s == 'IDS'
| where title_s == 'Default Password'

Field Validations

Loading…

Comments (0)

Loading comments...