ManageEngine AD360 CVE-2026-11374 SSO Token Prediction Attack - Rapid Sequential Requests
Detects high-frequency network connection attempts targeting common ManageEngine service ports (8443, 9251, 9261, 8080). This behavior is indicative of potential network reconnaissance, service scanning, or automated exploitation attempts.
Microsoft Sentinel (KQL)
