PHP Vulnerability and Scan Wave Exposure Correlation
Correlates devices touched by known IoC IP scan waves with PHP software inventory, vulnerability management data for PHP CVEs, and active PHP process execution telemetry to identify vulnerable exposed web servers.
Microsoft Sentinel (KQL)

