Security Hardening: Critical/High Vulnerabilities on Commercial VPN Clients
This KQL query identifies vulnerable VPN clients installed on endpoints that have High or Critical severity CVEs. VPN software is a high-value target for attackers because vulnerabilities can be exploited to bypass network access controls, intercept traffic, or gain remote access to internal networks.
Microsoft Sentinel (KQL)
