Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

DefenderXDR Exposure Management for CVE-2024-3094

Steven Lim@KQLWizard

•updated Jul 1, 2025•2•0•55

KQL Query from file: DefenderXDR Exposure Management for CVE-2024-3094

Microsoft Sentinel (KQL)

Tags

T1190 - Exploit Public-Facing Application T1078 - Valid Accounts T1046 - Network Service Discovery T1210 - Exploitation of Remote Services TA0001 - Initial Access TA0005 - Defense Evasion TA0003 - Persistence TA0004 - Privilege Escalation TA0007 - Discovery TA0008 - Lateral Movement C0036 - Pikabot Distribution February 2024 C0045 - ShadowRay C0048 - Operation MidnightEclipse T1021.004 - SSH T1184 - SSH Hijacking T1563.001 - SSH Hijacking T1037.004 - RC Scripts T1164 - Re-opened Applications T1547.007 - Re-opened Applications T1053.001 - At (Linux)TA0002 - Execution Vulnerability Scan Detected Network Connection Exploit Attempt Linux Azure Openssh Server Azure Sentinelkql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?