OpenCanary - MSSQL Login Attempt Via SQLAuth

SigmaHQ Detections@sigmaHQ

•updated Feb 3, 2025•0•0•1

Detects instances where an MSSQL service on an OpenCanary node has had a login attempt using SQLAuth.