MSSQL Server Failed Logon From External Network

SigmaHQ Detections@sigmaHQ

•updated May 31, 2025•0•36

Detects failed logon attempts from clients with external network IP to an MSSQL server. This can be a sign of a bruteforce attack.