Microsoft Sentinel high experimental kql

Pathlock TDnR - Credit Card Data Changes

Detects changes to credit card records in SAP, forwarded by Pathlock Threat Detection and Response. Unauthorized modifications to credit card data may indicate financial fraud, PCI-DSS violations, or targeted attacks against payment data stored within SAP.

View Source

Detection Logic

Pathlock_TDnR_CL
| where DataSource == "CHANGEDOC_CCARD"
| project TimeGenerated, Sysid, DataSource, Eventid, Instance, Hostname, Bname,
          Tcode, Report, Area, Subid, SrcIp, DestIp, AffectedUser, LogLine,
          MsgType, MsgId, MsgNo, MessageV1, MessageV2, MessageV3, MessageV4, CentralTs

Field Validations

Loading…

Comments (0)

Loading comments...