All Detections

SSH Banner Grabbing for Host Discovery

avatar
Darshan Thummar@Mighty
updated Jun 13, 2026002

Detects repeated SSH connections used to grab banners for host information gathering

Microsoft Sentinel (KQL)