Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

SAP NetWeaver Attack by Chinese Threat Actor Impact Assessment

Steven Lim@KQLWizard

•updated Jul 1, 2025•3•0•82

KQL Query

Microsoft Sentinel (KQL)

Tags

T1198 - SIP and Trust Provider Hijacking T1553.003 - SIP and Trust Provider Hijacking T1003.002 - Security Account Manager S0438 - Attor G0028 - Threat Group-1314 T1597.001 - Threat Intel Vendors DS0035 - Internet Scan T1016.001 - Internet Connection Discovery T1534 - Internal Spearphishing T1190 - Exploit Public-Facing Application T1071.001 - Web Protocols T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol TA0005 - Defense Evasion TA0003 - Persistence TA0006 - Credential Access TA0043 - Reconnaissance TA0007 - Discovery TA0008 - Lateral Movement TA0001 - Initial Access TA0011 - Command and Control TA0010 - Exfiltration Network Connection Inbound Network Connection Network Flow Linux Windows Network Generic Generic Network Log Generic Application Logkql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?