SQL Server Dedicated Admin Connection (DAC) mode activated (native)

Detects scenarios where an attacker enabled the DAC mode in order to bypass access controls, logon triggers, perform brute force attacks or run unauthorized queries.