All Detections

IPC RPC Endpoint Mapper High Volume Access

avatar
Darshan Thummar@Mighty
updated Jun 13, 2026002

Detects high-volume RPC endpoint mapper requests indicating inter-process communication abuse

Microsoft Sentinel (KQL)