Detect CVE Exploits on Network for Vulnerable Devices
This rule detects attempts to exploit known CVEs on the network where the targeted device is identified as vulnerable to that specific CVE. It correlates network inspection signatures with vulnerability management data to identify high-confidence exploitation attempts.
Microsoft Sentinel (KQL)

