Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

Exposure Management - Slim's Metric (MaxCVSS-DAW)

Steven Lim@KQLWizard

•updated Jul 1, 2025•2•0•53

KQL Query from file: Exposure Management - Slim's Metric (MaxCVSS-DAW)

Microsoft Sentinel (KQL)

Tags

T1078 - Valid Accounts T1068 - Exploitation for Privilege Escalation T1210 - Exploitation of Remote Services T1190 - Exploit Public-Facing Application TA0005 - Defense Evasion TA0003 - Persistence TA0004 - Privilege Escalation TA0001 - Initial Access TA0008 - Lateral Movement M1016 - Vulnerability Scanning T1595.002 - Vulnerability Scanning T1561 - Disk Wipe T1218.015 - Electron Applications G0018 - admin@338 T1583.001 - Domains T1584.001 - Domains TA0043 - Reconnaissance TA0040 - Impact TA0042 - Resource Development Vulnerability Scan Detected Admin Activity Azure Azure Monitor Logskql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?