Repeated External Scanning of PeopleSoft Administrative Endpoints
Detects one external source repeatedly requesting PeopleSoft administrative endpoints across multiple destinations or URLs within fifteen minutes. This activity could indicate an attacker performing reconnaissance or vulnerability scanning against public-facing PeopleSoft applications.
Microsoft Sentinel (KQL)
