IoT - New Critical/High CVEs
This rule identifies IoT devices that have reported critical or high severity software vulnerabilities within the last 24 hours. It correlates DeviceTvmSoftwareVulnerabilities data with DeviceInfo to specifically isolate vulnerable IoT-categorized assets and provides a summary of affected devices, software, and the associated CVEs to prioritize remediation efforts.
Microsoft Sentinel (KQL)
