Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

DefenderXDR exposure management for CVE-2024-38021

Steven Lim@KQLWizard

•updated Jul 1, 2025•3•0•42

KQL Query

Microsoft Sentinel (KQL)

Tags

T1078 - Valid Accounts T1077 - Windows Admin Shares T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution TA0005 - Defense Evasion TA0003 - Persistence TA0004 - Privilege Escalation TA0001 - Initial Access TA0008 - Lateral Movement TA0002 - Execution T1137.003 - Outlook Forms T1137.005 - Outlook Rules T1137.004 - Outlook Home Page Vulnerability Scan Detected Exploit Attempt Windows Azure Office 365 Azure Sentinel M365 Unified Audit Log Microsoft Exchange Serverkql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?