Microsoft Sentinel high experimental kql

Cynerio - IoT - Weak password

User signed in using weak credentials

View Source

Detection Logic

CynerioEvent_CL
| where TimeGenerated > ago(24h)
| where module_s == 'IDS'
| where title_s == 'Weak Password'

Field Validations

Loading…

Comments (0)

Loading comments...