MSSQL sp_procoption Set for Automatic Execution

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•46

Detects when a stored procedure in MSSQL is configured for automatic execution upon SQL Server startup using `sp_procoption`. This can be used by adversaries to establish persistence.