SAP - Unauthorized Execution of Transport Organizer (SE09)
Detects the execution of the SAP Transport Organizer transaction (SE09), which is critical for managing development objects and transport requests. Execution by unauthorized users may indicate unauthorized system modification or bypassing of change management controls.
YARA-L
