MSSQL Destructive Query Detected

SigmaHQ Detections@sigmaHQ

•updated Jun 11, 2025•0•45

Detects the invocation of MS SQL transactions that are destructive towards table or database data, such as "DROP TABLE", "DROP DATABASE", or "TRUNCATE TABLE". These operations can lead to data loss and impact system availability.